Anilrgowda

Question: I have the following 1202 event error: Security policies were propagated with warning. 0x534 : No mapping between account names and security IDs was done.

I have discovered the problem via debugging that the system cannot find 'Enterprise admin' and the problem setting is 'allow terminal services login' (SeRemoteInteractiveLogonRight) and I know the GPO that has the problem. But I don't know what to do with this information. How do I replace or remove this entry in the GPO?

Anilrgowda

it sounds to me like there is a user account that you are setting in the GPO as having rights.

You should be able to use Group Policy Management Console (you can download it from MS if you need to) and look at the "settings" tab to see what all the GPO does. In there, there should be something saying something like "Enterprise admin" and you'll see what policy setting it is under. Then you can edit that GPO and remove that setting.

If I had to take a shot on the setting, based on what you are saying, I'd say open the GPO for editing in the GPMC and look at the following setting:

Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Allow Log on Through Terminal Services

My guess is that there is an account listed there that doesn't exist or is typed incorrectly