Group Policy Application Problems on Upgraded XP Pro Machines

From: NJB (NJB_at_discussions.microsoft.com)
Date: 09/09/04 

Date: Thu, 9 Sep 2004 08:41:03 -0700

I have several user nodes on my network that are experiencing a problem
applying the security settings for my default domain policy. I have done
extensive searching on the particular issue and have been able to find the
problem, but have unsuccessfully resolved the issue. Below is the error that
I keep getting on these machines:

Process GP template gpt00000.dom.
-------------------------------------------
Friday, August 27, 2004 2:37:15 PM
        Copy undo values to the merged policy.
----Configuration engine was initialized successfully.----

----Reading Configuration Template info...

----Configure User Rights...
        Configure S-1-5-18.
        Configure S-1-5-21-1214440339-1123561945-1801674531-513.
        Configure S-1-5-21-1214440339-1123561945-1801674531-516.
        Configure S-1-5-21-1214440339-1123561945-1801674531-512.
        Configure S-1-5-32-544.
Error 1168: Element not found.
 Some user rights are not defined in SecEdit.
Error 1168: Element not found.
         Error configuring S-1-5-32-544.

This particular sid appears to be the builtin/administrators group sid. Why
it is only happening on a few machines, I am not quite sure. All of the
machines that are experiencing this problem are were upgraded from 2000 to XP
Pro.
The machines seem to be functioning fine, except for the fact that I can not
connect to the machines on the network side of things.

Some of the things I've attempted include recreating the local security
database using kb article 278316, I've tried removing the
builtin/administrators group from the policy setting that seems to be causing
the problem: "Manage Auditing and Security settings". I am currently at a
loss. Any help would be greatly appreciated. Thanks.

Relevant Pages

  • Re: IE 6 hangs without http:// header in URL
    ... Nobody else is experiencing this issue, ... registry values below confirmed that they did not even exist in the ... with a client. ... The two machines are disseperate machines. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: Winlogon.exe Error
    ... Hello I have a networking that has a handful of pcs experiencing this error ... networked environment with approximately over 2000 machines. ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Excel 2007 data missing from screen
    ... you have to scroll away and scroll back however is> time ... > machines all experiencing the same problem. ... > upgraded installs of Office, tried different hardware, replaced video> cards, ... > effect for me and any of the machines experiencing it. ...
    (microsoft.public.excel)
  • Re: Please Help! System wont shut down
    ... Symantec products including NIS and their AV. ... machines and those of several others I supported. ... experiencing a raft of problems of various types with it on several of those ... there better, less bloated, less invasive, and better working alternatives, ...
    (microsoft.public.windowsxp.general)
  • Interactive login problems
    ... I installed windows server 2003 and have run into several ... The admin users have no extra domain policy on it, ... to be local administrators on their machines to login at all. ...
    (microsoft.public.windows.server.general)