Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2210
  • Last Modified:

Windows 2008 R2 AD DS BPA Issue

Hi All,

When I run the AD DS BPA  I get the following error:

Title:
The AD DS BPA should be able to collect data about Group Policy Results setting "Access this computer from the network" from the domain controller SERVERNAME

Issue:
The Active Directory Domain Services Best Practices Analyzer (AD DS BPA) is not able to collect data about Group Policy Results setting "Access this computer from the network" from the domain controller SERVERNAME.
Impact:
The AD DS BPA will not be able to validate configuration data about Group Policy Results setting "Access this computer from the network".
Resolution:
Troubleshoot the domain controller SERVERNAME to determine the root cause of the problem.
More information about this best practice and detailed resolution procedures: http://go.microsoft.com/fwlink/?LinkId=142188

The link did not help unfortunately, but just find out that the failure is that ADBPA failed to translate one account name defined in Group Policy Results setting "Access this computer from the network" to a SID.

With the command "$doc = C:\Windows\System32\BestPractices\v1.0\Models\Microsoft\Windows\DirectoryServices\DirectoryServices_model.ps1 I get the following result:
Can not translate account Name Administratoren to SID

I didn't find this account name and now don't know how I should remove it.

Any ideas?
 
Thanks in advance,
Chaklie
0
Morphill
Asked:
Morphill
  • 2
1 Solution
 
Norm DickinsonGuruCommented:
You could possibly create an account with that name for the purpose of running the best practices analyzer. Don't give it any special permissions. You can always delete it after.
0
 
MorphillAuthor Commented:
Sorry, it was something completly different.
the replication between the domaincontrollers doesn't funktion, because of false dns entry's
0
 
MorphillAuthor Commented:
no solution needed
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now