none
Event ID 1003 Source SceSrv

    Question

  • Hi guys,

    I have a really strange Event ID in the logs - Event ID 1003 Source SceSrv Task Category None.

    Notification of policy change from LSA/SAM has been retried and failed. Error 4312 to save policy change for account S-1-5-21-1330502445-2314489556-838424494-13001 in the default GPOs. For more debugging information, please look security\logs\scepol.log under Windows root.

    I checked C:\Windows\security\logs\ but there is no scepol.log presented. Also I've checked ProfileList in the registry and there is no such ID there. We have RWDC and RODC and on some RODC is presented on some not. The next different thing is that this event also appeared but with a different account on different RODC:

    Notification of policy change from LSA/SAM has been retried and failed. Error 5 to save policy change for account S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415 in the default GPOs. For more debugging information, please look security\logs\scepol.log under Windows root.

    Is there any way to solve this problem or should I be worried about?

    Thanks in advance

    Wednesday, September 30, 2015 12:28 PM

All replies