JSI Tip 2434. Event ID 1000 and 1202 after modifying group policy to 'Rename Administrator Account'?

Jerold Schulman

May 25, 2000

1 Min Read
ITPro Today logo in a gray background | ITPro Today


If you make the subject modification on your Windows 2000 Server, your Application event log may record the following every 5 minutes:

Event Type: WarningEvent Source: SceCliEvent Category: NoneEvent ID: 1202Date: 21/09/1999Time: 18:15:14User: N/AComputer: Description: Security policies are propagated with warning. 0x4b8 : An extended error occurred.              Please look for more details in TroubleShooting section in Security Help.Event Type: ErrorEvent Source: UserenvEvent Category: NoneEvent ID: 1000Date: 21/09/1999Time: 18:15:14User: NT AUTHORITYSYSTEMComputer: Description: The Group Policy client-side extension Security was passed flags (17)             and returned a failure status code of (1208).

You set the policy to use an account that already exists.

To fix the problem, either:

Reconfigure the policy to use an account that does not exist.

Disable the Rename Administrator Account policy.

NOTE: See tip 2257.

NOTE: See the Introduction to Windows 2000 Group Policy whitepaper.


Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like