Archived from groups: microsoft.public.win2000.setup (More info?)
Hello!
I have a Windows 2000 domain that I inherited. It has an Application Log
filled with "Security policies are propagated with warning. 0x534" errors
every five minutes. An hour of Googling shows the problem is likely due to
deleted user accounts still being linked to group policies.
I have many ghost accounts starting with *S-1-5-21, but I cannot find out
how to delete those accounts. They do not show up in AD Users/Computers. How
do I delete all of them?
Archived from groups: microsoft.public.win2000.setup (More info?)
You need to delete the unresolved SIDs from the group policies that are
hitting that server.
This can be done in the Active Directory Users and Computers MMC. When you
edit the policy you will see entries like you mentioned or make even
longer. These are usually in the user rights assignmnet section.
You can also use GPRESULT.EXE with the /V switch to get a list of what
Group Policies are hitting the machine.
Regards
IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
You are about to answer a thread that has been inactive for more than 6 months. If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.