JSI Tip 2434. Event ID 1000 and 1202 after modifying group policy to 'Rename Administrator Account'?JSI Tip 2434. Event ID 1000 and 1202 after modifying group policy to 'Rename Administrator Account'?

If you make the subject modification on your Windows 2000 Server, your Application event log may record the following every 5 minutes:

Event Type: WarningEvent Source: SceCliEvent Category: NoneEvent ID: 1202Date: 21/09/1999Time: 18:15:14User: N/AComputer: Description: Security policies are propagated with warning. 0x4b8 : An extended error occurred.              Please look for more details in TroubleShooting section in Security Help.Event Type: ErrorEvent Source: UserenvEvent Category: NoneEvent ID: 1000Date: 21/09/1999Time: 18:15:14User: NT AUTHORITYSYSTEMComputer: Description: The Group Policy client-side extension Security was passed flags (17)             and returned a failure status code of (1208).

You set the policy to use an account that already exists.

To fix the problem, either:

Reconfigure the policy to use an account that does not exist.

Disable the Rename Administrator Account policy.

NOTE: See tip 2257.

NOTE: See the Introduction to Windows 2000 Group Policy whitepaper.