Proposed SceCli 1202 Events in App Log

  • Friday, September 07, 2012 9:37 AM
     
     
    Hello,

    I have Windows Server 2008 R2. I am receiving Event 1202, SceCli: Security policies were propagated with warning. 0x534 : No mapping between account names and security IDs was done. I get this error: Cannot find IIS AppPool\Classic .NET AppPool. I reviewed this article http://support.microsoft.com/kb/977695. I found that I do have the "IIS AppPool\" prefix in front of my Classic .NET AppPool. The hotfix when run says it is not applicable for this computer. I am at a loss how to resolve this issue. Any assistance would be greatly appreciated.



    Michael

All Replies

  • Monday, September 10, 2012 8:24 AM
    Moderator
     
     

    Hello,


    See if this helps:


    Open command prompt on domain controller and run following commands
    1. dcgpofix /ignoreschema and press yes at both prompts.
    2. gpupdate
    The refresh event viewer.


    Refer to:  Windows 2008 - Event ID 1202,SceCli
    http://social.technet.microsoft.com/Forums/en/windowsserver2008r2general/thread/285d63f8-254a-419e-a184-03423046edad


    Thanks
    Zhang

  • Thursday, September 13, 2012 8:15 AM
    Moderator
     
     

    Hello,


    Have you managed to fix this?


    Regards,
    Zhang
    TechNet Subscriber Support

  • Thursday, September 13, 2012 11:42 AM
     
     

    Hello Zhang,

    I have not tried that solution as of yet.  I had read that it might be dangerious to run that command on a production system.  Can you give any insight if it is safe?  The  IIS AppPool\Classic .NET AppPool is the account that the winlogon.log shows as the problem.  I am running IIS 7.5 and IIS 6.  The IIS 6 is only used for SMTP Virtual Server and only out outbound traffic.  The article you refered to references Exchange server.  I am not sure if that makes a difference.  Thank you for your assistance.

    Sincerely,

    Michael

  • Monday, September 24, 2012 12:02 AM
     
     

    I have not fixed this issue yet.  I am waiting on a reply to my last post.  Please kindly reply.  Thank You.

    Michael

  • Monday, September 24, 2012 6:53 AM
    Moderator
     
     

    Hi Michael,


    We will involve a higher level support guy to follow up.

    Regards,

    Zhang     

    TechNet Subscriber Support

    If you are TechNet Subscriptionuser and have any feedback on our support quality, please send your feedback here

  • Monday, September 24, 2012 7:38 AM
     
     
    it seems you selected an incorrect version of the hotfix, please download it according to your CPU and try again.

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Tuesday, September 25, 2012 12:41 PM
     
     
    I am using the 64 bit version based on my processor / Windows version.  I get the same message as in my original post.
  • Thursday, September 27, 2012 6:12 AM
     
     
    I think current issue is you are not able to apply the hotfix. once you apply the hotfix, this issue can be resolved.

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Friday, September 28, 2012 3:40 AM
     
     
    Please review my original post.  According to that aticle I should not need the hotfix in the first place but I am still receving those errors in the log.  Since I can not apply the hotfix I can't check to see if the hotfix will solve the problem.  Mr. Zhang mentioned running following commands
     1. dcgpofix /ignoreschema and press yes at both prompts. 2. gpupdate  3. The refresh event viewer.  Per another article but is it safe to run that command on a production system.   I seen some mention that it may not be safe.   The  IIS AppPool\Classic .NET AppPool is the account that the winlogon.log shows as the problem.  I am running IIS 7.5 and IIS 6.  The IIS 6 is only used for SMTP Virtual Server and only out outbound traffic.  The article you refered to references Exchange server.  I am not sure if that makes a difference.  Thank you for your assistance.

    Sincerely,

    Michael
  • Monday, October 01, 2012 12:55 PM
     
     Proposed

    I do not the purpose of "dcgpofix /ignoreschema", this command just reset the default GPO.

    do you add "IIS AppPool\Classic .NET AppPool" in any policy? what is the policy?

    did you try to add  quotation marks ?


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    • Proposed As Answer by Aaron Pe - MSFT Tuesday, December 18, 2012 8:11 AM
    •