event error 1202 from Scecli

From: jefwea (jefwea_at_discussions.microsoft.com)
Date: 01/27/05


Date: Thu, 27 Jan 2005 06:09:01 -0800

I am getting error 1202 in the event logs.
I have followed the instructions in the properties of the event as well as
in Q324383.

But can not seem to resolve.

When I look at the at the user rights for the server operater in the default
domain controller policy, I cannot find any indication that there are
missing or unknown Sid's.

Does any one have a suggestion for this error.
Output logs are below.

Thanks for the help.
Jeff

C:\>find /I "cannot find" %systemroot%\security\logs\winlogon.log

---------- C:\WINNT\SECURITY\LOGS\WINLOGON.LOG
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.
        Cannot find Server Operators.

C:\>find /I "server operators" %systemroot%\security\templates\policies\gpt*.*

---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00000.DOM

---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00001.INF
SeBackupPrivilege = *S-1-5-32-544,*S-1-5-32-551,Server Operators
SeInteractiveLogonRight =
*S-1-5-21-1491778951-1156932096-3766891002-1551,IUSR_A
DAM2,*S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-548,Server Operators,*S-1-5-32-550
SeRemoteShutdownPrivilege = *S-1-5-32-544,Server Operators
SeRestorePrivilege = *S-1-5-32-544,*S-1-5-32-551,Server Operators
SeShutdownPrivilege = *S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-548,Server
Operators
,*S-1-5-32-550
SeSystemTimePrivilege = *S-1-5-32-544,Server Operators

C:\>find /i "mapping" %systemroot%\security\logs\winlogon.log

---------- C:\WINNT\SECURITY\LOGS\WINLOGON.LOG
[Mapping] gpt00000.dom = Default Domain Policy
[Mapping] gpt00001.inf = Default Domain Controllers Policy
[Mapping] gpt00000.dom = Default Domain Policy
[Mapping] gpt00001.inf = Default Domain Controllers Policy