Ошибка от SceCli

[Maximilian Профиль ICQ]

Сервак на win2k c PDC
Насколько я заметил... после установки второго DC постоянно генерируется ошибка от SceCli в журнале прилождений Код ID 1202:

Выполнено распростронение политики безопасности с предупреждением 0x534: Именам пользователей не сопоставлены коды защиты данных.

DCdiag на PDC выдает следующее:

C:\Documents and Settings\Администратор>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SERVER02
Starting test: Connectivity
......................... SERVER02 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SERVER02
Starting test: Replications
......................... SERVER02 passed test Replications
Starting test: NCSecDesc
......................... SERVER02 passed test NCSecDesc
Starting test: NetLogons
......................... SERVER02 passed test NetLogons
Starting test: Advertising
......................... SERVER02 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... SERVER02 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... SERVER02 passed test RidManager
Starting test: MachineAccount
......................... SERVER02 passed test MachineAccount
Starting test: Services
......................... SERVER02 passed test Services
Starting test: ObjectsReplicated
......................... SERVER02 passed test ObjectsReplicated
Starting test: frssysvol
There are errors after the SYSVOL has been shared.
The SYSVOL can prevent the AD from starting.
......................... SERVER02 passed test frssysvol
Starting test: kccevent
......................... SERVER02 passed test kccevent
Starting test: systemlog
......................... SERVER02 passed test systemlog

Running enterprise tests on : office.nse
Starting test: Intersite
......................... office.nse passed test Intersite
Starting test: FsmoCheck
......................... office.nse passed test FsmoCheck

DCdiag на втором DC дает это:

C:\Documents and Settings\Администратор.OFFICE>dcdiag

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Connectivity
......................... NCRUAS02 passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\NCRUAS02
Starting test: Replications
......................... NCRUAS02 passed test Replications
Starting test: NCSecDesc
......................... NCRUAS02 passed test NCSecDesc
Starting test: NetLogons
......................... NCRUAS02 passed test NetLogons
Starting test: Advertising
......................... NCRUAS02 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... NCRUAS02 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... NCRUAS02 passed test RidManager
Starting test: MachineAccount
......................... NCRUAS02 passed test MachineAccount
Starting test: Services
......................... NCRUAS02 passed test Services
Starting test: ObjectsReplicated
......................... NCRUAS02 passed test ObjectsReplicated
Starting test: frssysvol
Error: No record of File Replication System, SYSVOL started.
The Active Directory may be prevented from starting.
......................... NCRUAS02 passed test frssysvol
Starting test: kccevent
......................... NCRUAS02 passed test kccevent
Starting test: systemlog
......................... NCRUAS02 passed test systemlog

Running enterprise tests on : office.nse
Starting test: Intersite
......................... office.nse passed test Intersite
Starting test: FsmoCheck
......................... office.nse passed test FsmoCheck


Что сделать, что бы ошибка от SceCli не генерировалась?

[Harry33 Профиль СайтICQ]

Maximilian
Ошибка известная и с общим функционированием АД практически не связана, как правило, подобные проблемы возникают при наличии различных языковых версий ОС и использованием в настройках политик наименований локальных учетных записей и групп. Проверь настройки политик домена на наличие учетных записей, которые имеют различное наименование в зависимости от языка ОС (например Administrator, Guest и т.п.)