Event ID: 1003 Source: scesrv

EventID.Net

EvLog Event Analyzer

Monitor unlimited number of servers
Filter log events
Create email and web-based reports

EventID.Net Subscription

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1003 Source: scesrv

Source

scesrv

Level

Error

Description

Policy change from LSA/SAM can't be saved in the policy storage. Error <error number> to save policy change in the default GPOs. For more debugging information, please look security\logs\scepol.log under Windows root.

English

Request a translation of the event description in plain English.

Concepts to understand

What is the Group Policy?
What is the LSA?
What is the SAM?

Comments

Mike Z.

I used a utility from the web called SidToName to determine the Account Name with the problem. You can get the SID from the winlogon.log file. I found the account, I deleted it, recreated it, and the problem was solved.

EventID.Net

Error: 12 - The access code is invalid.
Error: 4312 = The object identifier does not represent a valid object.

EventID.Net

For error 2 and 5, as per Microsoft ME272560, this is a known problem and they recommend applying the latest service pack for Windows 2000.

Error 2 can also be caused by a virus that uses the FireDaemon program to run as a Windows service. Check ME830064 for information on how to fix this problem.

EventID.Net

According to Microsoft: "To work around this problem, use a group to grant the privilege, and make the user member of this group, instead of using many individual user accounts with a certain privilege. This is a good way to recover after this problem occurs, especially if it might take more time to find the user accounts that are missing from the list than it would to set up the group. Also, a short list of accounts in the policy helps the policy process faster."

Private comment

Subscribers only. See an example of private comment

Links

SidToName

Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...

Feedback

Send comments or solutions - Notify me when updated

Printer friendly

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.