Security policies were propagated with warning. 0x4b8 : An extended error has occurred.
dear all,
i have 2 domain controllers (windows server 2012 r2) in network, receive warning on both servers every 5 min:
security policies propagated warning. 0x4b8 : extended error has occurred.
advanced problem available on http://support.microsoft.com. query "troubleshooting 1202 events".
i tried to re-create local group policy file following the microsoft kb forum, not successful, still got warnings !!
please can me solve problem ?
thank you
hi,
thanks post.
according research, below possible cause of issue.
possible cause:
a gpo applying restricted group policy adding domain group builtin\administrators or other computer local, "well-known", builtin group.
gpo applied servers or computers, including domain controllers.
if domain group used in restricted groups policy of type "domain local" event 1202 seccli logged every 5 minutes, when applying group policies dcs
since computer local builtin group has same sid domain well-known groups in builtin folder of active directory, when policy applies domain controller performed attempt join domain group of type "domain local" 1 of groups in builtin folder. per group scope definition domain local group cannot added 1 of builtin groups of active directory
you try below solutions:
1. if group supposed added domain group in builtin folder, change type of domain group, domain local global or universal.
2. if domain group not supposed member of builtin group restrict application of policy not apply domain controllers:
method 1. - change domain group membership not include domain controllers
method 2. - apply wmi filter gpo exclude domain controllers
some related article reference:
what occurs when security group policy cse encounters null dacl
best regards,
alvin wang
please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.
Windows Server > Windows Server General Forum
Comments
Post a Comment