WIN2K3 DC generates event id: 643.

Posted on 2006-03-26
Medium Priority
Last Modified: 2010-04-18
I have a WIN2K3 AD domain. On my DC's, whenever someone opens GPO, its generating 643 event id. In changed attributes, there are no values.. Any help/ suggestions much appreciated...
Question by:skakarla
  • 2
  • 2
LVL 78

Accepted Solution

Rob Williams earned 500 total points
ID: 16293847
From eventid.net:
"This event normally indicates a successful change to the Windows 2000 AD security policies. However, this also is recorded when the Group Policies are applied (event id 1704 would indicate a successful application of Group Policies). As per a newsgroup posting of a Microsoft intrusion detection engineer, this is "normal behavior" for Windows 2000."
I assume the same would apply to 2003.

LVL 48

Expert Comment

ID: 16296804
Hi skakarla,

robwill is correct - same applies for 2003, cheers

LVL 78

Expert Comment

by:Rob Williams
ID: 16305190
Thanks skakarla,
and thanks James for back up :-)
LVL 48

Expert Comment

ID: 16306037
never a problem :)

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question