mrtechsystems Posted June 23, 2005 Posted June 23, 2005 Please could anyone shred any light on these two messages I kepp getting the first eorror every five minutes on the Server First Security policies are propagated with warning. 0x6fc : The trust relationship between the primary domain and the trusted domain failed. Second Policy change from LSA/SAM can't be saved in the policy storage. Error 5 to save policy change for account S-1-5-21-2064273222-3910494029-2838569261-11183 in the default GPOs. For more debugging information, please look security\logs\scepol.log under Windows root. Many Thanks Thanks
eejit Posted June 23, 2005 Posted June 23, 2005 How many domain controllers and member servers do you have?
mrtechsystems Posted June 23, 2005 Author Posted June 23, 2005 I have 1 Domain controller and 3 Member
mrtechsystems Posted June 23, 2005 Author Posted June 23, 2005 Geoff I have tried that articles and no luck m8
tarquel Posted June 24, 2005 Posted June 24, 2005 For more debugging information, please look security\logs\scepol.log under Windows root. Is there anything useful in that log? Just a thought - bit hard having not seen that msg myself and not having 2k servers. Regards, N.
ninjabeaver Posted June 24, 2005 Posted June 24, 2005 Probably not what you are looking for but try Event ID. Might be worth bookmarking anyway. Type in the EventID, it tells you what it is and a link how to fix it. You have to pay to click the links, but you can copy and paste them.
tarquel Posted June 24, 2005 Posted June 24, 2005 You have to pay to click the links, but you can copy and paste them. hehe we could setup a paypal account - get some donations and subscribe for the education usage of it all lol Just a thought lol N.
ninjabeaver Posted June 24, 2005 Posted June 24, 2005 You have to pay?!?!?! Since when? As long as I've known. (2 years +)
KeithFermor Posted June 26, 2005 Posted June 26, 2005 Event log error message(s): it sounds like a timing issue, although you did say that there is only a single DC in your domain. If the clock is >5min out between DCs, then replication fails. So, I would certainly look at system time across all of your servers, as GPO activity is also time based and synchronised. Bon chance! (Or is that FAT CHANCE!)
MkII Posted June 26, 2005 Posted June 26, 2005 You have to pay?!?!?! Since when? But the free information is useful as well. - and gives you pointers that you can then google [further].
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now