SceCli 1202 events are logged every time Computer Group Policy settings are refreshed on a computer that is running Windows Server 2008 or Windows Vista
Consider the following scenario:
- On a computer that is running Windows Server 2008 or Windows Vista, you use Group Policy Management Editor to manage a Group Policy object (GPO).
- One or more changes are made to the “User Rights Assignment” settings in the GPO, and these settings have a per-service SID defined.
In this scenario, the following SceCli 1202 event is added to the Application log when the Group Policy is applied:
Log Name: Application
Event ID: 1202
Task Category: None
Computer: [computer name]
Description: Security policies are propagated with warning. 0×534 : No mapping between account names and security IDs was done.
- You install Microsoft SQL Server 2008 on a domain controller that is running Windows Server 2008 or Windows Small Business Server 2008.
- You make a change to the “User Rights Assignment” setting in a default GPO of the domain controller from a computer that is running Windows Server 2008 or Windows Vista.
- This GPO is applied to the domain controller that is running Windows Server 2008 or Windows Small Business Server 2008.
In this example, some SceCli 1202 events are logged and many functions in SQL Server 2008 do not work when the GPO is refreshed. These functions include replication, making account changes, and setting folder permissions.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB975566.