Hi There,
For a long while we have been reciving these errors
Source: Username
Event ID: 1000
User: NT AUTHORITY\SYSTEM
Computer: Servername
Windows Cannot access the file gpt.ini for GPO. The file must be present
at
the location <>. (). Group Policy Processing Aborted.
It turned out that the Policies folder in sysvol was empty so I recreated
them using this knowledge base article
http://sup****t.microsoft.com/kb/253268
We then started to receive these error messages
Source: SceCli
Event ID: 1202
User: NA
Computer: Servername
Security policies are propaged with warning. 0x534: No mapping between
account names and security ID's was done
From this Knowledgebase i worked out that it looks like the Power Users
group has been removed.
http://sup****t.microsoft.com/default.aspx?scid=kb;en-us;324383
OUTPUT 01:
---------- C:\WINNT\SECURITY\LOGS\WINLOGON.LOG
Cannot find Power Users.
Cannot find Power Users.
OUTPUT 02:
Z:\>find /i "Power Users" C:\WINNT\security\templates\policie
---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00000.DOM
---------- C:\WINNT\SECURITY\TEMPLATES\POLICIES\GPT00001.INF
It is no longer present in Active Directory, I think this has been removed
a
long time ago and we won't have a backup of the Active Directory schema to
restore from. My question to you would be is there anyway around this or
would it need a complete rebuild and setup up the AD from scratch again?
Its
not to much of a problem at the moment but in the future we probably will
be
upgrading to SBS 2003 via a swing migration, but if the schema if faulty
then there is no point doing a swing as that will be corrupt too.
