Problem with Group Policy - Error 1332 in winlogon.log

keni766
keni766 used Ask the Experts™
on
I'm trying to create a new group policy to lock down the server desktop for Terminal Services users.  While testing, I've noticed that occasionally it does not apply correctly.  It is not happening 100% of the time, so I started troubleshooting.  I found an error in the winlogon.log file.

Error 1332:  No mapping between account names and security IDs was done.
Local System account

This is happening on the Create Global Objects security policy setting, where Local System is the default.  Any ideas what might cause this and how to resolve it?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Massimiliano LoiSenior System Engineer

Commented:
when you experience this error, does the user load his standard or a temporary profile?

Author

Commented:
It's a standard profile, but not all of the security settings in the Group Policy have applied, so they have access to far more things then needed.
Massimiliano LoiSenior System Engineer

Commented:
did you try enforcing the "non applied" GPO?
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
Enforcing doesn't seem to make any difference.  I should say that the Group Policy Results wizard for this server/user combination shows that all policies are being applied.  But when you log in as that user, it is not correct about 50% of the time.
Senior System Engineer
Commented:
could you check if some GPO is configured to apply same policies with different settings?

Author

Commented:
That was it!  I forgot the rule that the closest policy is what takes precedence.  I've got the settings corrected and it works fine now.  I'm still getting that message about Local System, but I don't really know what to do about it.
Massimiliano LoiSenior System Engineer

Commented:
it should be depending on wrong rights assignment...
try to read this: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_23357258.html

Author

Commented:
maxloi's response helped me figure out why my group policy was not applying how I intended, but we never resolved the issue of the error message in the original post.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial