Server R2 SceCli Event id:1202 (0x534) solution

The error is as follows:
Log name:application

Source:scecli

date:10/28/2018 4:03:07 PM

Event id:1202

Task Category:none

Level:warning

Keywords:classic

user:n/a

Computer:DC01.domain.com

Description:

Security policies were propagated with warning. 0x534:no mapping between account names and security IDs is done.

Problem is available on http://support.microsoft.com. Query for "Troubleshooting 1202 events".

The solution is as follows:

Use RSoP to identify the specific User rights, Restricted Groups, and Source GPOs that contain the problem accounts:

A. Start, Run, Rsop.msc

B. Review the results for Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment and Computer Configuration\Windows Settings\Security Settings\Local policies\restricted Groups for any errors flagged wit H a red X.

C. For any User right or Restricted Group marked with a red X, the corresponding GPO that contains the problem policy sett ING is listed under the column entitled "Source GPO". Note the specific User rights, Restricted Groups and containing Source GPOs that is generating errors.

I basically resolve this issue by backing up the GPO, and then remove all instances of "DefaultAppPool" or "Classic. Net AppPool" from the Default Domain Controllers Policy GPO. So far, no harm. We'll see that OWA is still available the next time the Exchange server restarts. I'm sure it will handle the error because I made a gpupdate/force and the log shows that all policies have been successfully applied.

Server R2 SceCli event id:1202 (0x534) solution