technical solutions and commentary

The Application Event Log contains multiple erros, with the event code ‘1202′ with the source of ‘SceCli’. The details contains the hex error code ‘0×534′, the error description starts out… “No mapping between account names and security IDs was done.” The ‘0×534′ code is the hex for “1332″ which shows up in the winlogon.log file as well.

This error is likely caused because a Group Policy Object contains an entry refering to a group or user account that it can not locate in the Security Accounts database. This can result when a group or account is renamed, deleted or the name is misspelled in the GPO. In one scenario, a Domain GPO referenced the group name of ‘Domain Administrators’ (which does not exist as a bult-in group) instead of the proper built-in group name of ‘Domain Admins’. Once this was corrected and the machine policy refreashed, everything worked began working properly and the 1202 errors cleared up.

The resolution to this problem can be found in the Microsoft KB Article KB324383 - “Troubleshooting SCECLI 1202 Events”.

If you are getting 1202 errors and it is not related to the GPO issues in the KB noted above, this the Microsoft KB Article KB284461 - “Event ID1000 and Event ID 1202 Messages Are Reported When You Set Security on the File Replication Service by Using Group Policy” may be helpful.