Re: Security Policy Issues

The only references that I could find for that error with 0xd : The data is
invalid is for when seen on domain controllers but that is not your case.
Since you are having problems with Restricted Groups for power users what I
would try is to remove that RG setting and then see is the Event ID 1202
goes away and if it does it would seem to be related to RG misconfiguration.
It is also a good idea when having such problems to run the support tool
netdiag on one or a couple of the domain computers being affected looking
for problems such as dc discovery, dns, and trust/secure channel. I would
also run the support tool gpotool on a domain controller to see if all
active domain controllers are found and no problems are reported such as GPO
mismatches. --- Steve

http://support.microsoft.com/kb/250842 -- general Group Policy
troubleshooting
http://technet2.microsoft.com/WindowsServer/en/Library/0c627456-5dfa-44db-b43a-e41c8f4f09231033.mspx
--- more GP troubleshooting.

"Rob" <Rob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9907183D-FE9A-4679-8C04-766C3811CD4A@xxxxxxxxxxxxxxxx
I'm having a problem with a security templates deployed by an OU Policy
for
some computers on our domain.

Some of the policies computer settings are pushed to the workstations
others
are not. Specifically the restricted group configuration for the power
users
group doesn't work at all.

On the workstations application event log I get an Event ID 1202 logged
the
source being SCEcli. These entries show up everytime the computer policy
refreshes.

Sample event text:

Security policies are propagated with warning. 0xd : The data is invalid.

For best results in resolving this event, log on with a non-administrative
account and search http://support.microsoft.com for "Troubleshooting Event
1202s".

Help where do I begin?

Thanks
Rob

Rob
IT guy!


.

Relevant Pages

  • Re: Need help with sites configuration
    ... MCSE, MVP Directory Services ... All domain controllers have a copy of my DNS zone. ... All my clients have statically configured DNS servers 1 and 2 both on ... Production computers have a GPO, setting their DNS servers to 3 and 4 ...
    (microsoft.public.windows.server.active_directory)
  • Re: XP SP2 Firewall with GPO in Domain
    ... It would not have anything to do with turning off the computers all at one ... time as Group Policy is not refreshed at shutdown/logoff. ... for DNS in that they point only to domain controllers as their preferred DNS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Split AD and Server Administration
    ... If you do not need them to do all that on domain controllers then you can ... domain controllers without being in the administrators group for the domain, ... > of Windows Servers. ... > while only having the ability to add/remove computers from AD. ...
    (microsoft.public.win2000.security)
  • Exclude some users and computers form logout script
    ... Sales OU has SalesUsers OU and Sales Computers OU, ... There is also All Users GPO linked to domain that defines logout ... However it does not restrict other users from running logout scripts ... on Test Machines and Domain Controllers because Logout scripts are ...
    (microsoft.public.win2000.group_policy)
  • Exclude users and computers form logout script
    ... Sales OU has SalesUsers OU and Sales Computers OU, ... There is also All Users GPO linked to domain that defines logout ... However it does not restrict other users from running logout scripts ... on Test Machines and Domain Controllers because Logout scripts are ...
    (microsoft.public.windows.server.active_directory)