Windows 2008 R2 AD DS BPA Issue

Posted on 2012-08-23
Last Modified: 2012-08-28
Hi All,

When I run the AD DS BPA  I get the following error:

The AD DS BPA should be able to collect data about Group Policy Results setting "Access this computer from the network" from the domain controller SERVERNAME

The Active Directory Domain Services Best Practices Analyzer (AD DS BPA) is not able to collect data about Group Policy Results setting "Access this computer from the network" from the domain controller SERVERNAME.
The AD DS BPA will not be able to validate configuration data about Group Policy Results setting "Access this computer from the network".
Troubleshoot the domain controller SERVERNAME to determine the root cause of the problem.
More information about this best practice and detailed resolution procedures:

The link did not help unfortunately, but just find out that the failure is that ADBPA failed to translate one account name defined in Group Policy Results setting "Access this computer from the network" to a SID.

With the command "$doc = C:\Windows\System32\BestPractices\v1.0\Models\Microsoft\Windows\DirectoryServices\DirectoryServices_model.ps1 I get the following result:
Can not translate account Name Administratoren to SID

I didn't find this account name and now don't know how I should remove it.

Any ideas?
Thanks in advance,
Question by:Morphill
    LVL 13

    Expert Comment

    by:Norm Dickinson
    You could possibly create an account with that name for the purpose of running the best practices analyzer. Don't give it any special permissions. You can always delete it after.

    Accepted Solution

    Sorry, it was something completly different.
    the replication between the domaincontrollers doesn't funktion, because of false dns entry's

    Author Closing Comment

    no solution needed

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Want to promote your upcoming event?

    Attending an event? Speaking at a conference? Or exhibiting at a tradeshow? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

    We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
    I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now