Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Server 2008 SP 2 with many System Event ID 1202

$
0
0

This server is Windows 2008 (NOT R2) with SP2 Standard Edition 64 bit - the System Event log shows many Event ID 1202's.

I originally was having issues with WBADMIN - system state backups were failing.  Found all of the 1202's and think they may be part of the issue with backups...

I did a RSOP and found many errors within the COMPUTER CONFIGURATION - User Rights Assignments.  I ran from an elevated command prompt:

FIND /I "Cannot find"  %SYSTEMROOT%\Security\Logs\winlogon.log and the results are:

---------- C:\WINDOWS\SECURITY\LOGS\W
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.
        Cannot find SQLSERVERAGENT.
        Cannot find MSSQLSERVER.
        Cannot find MSSQLFDLauncher.

I kind of understand that I'll need to modify Default Domain Controller Group Policy (found online) but when I go into the policies that RSOP shows having errors, I don't see any of the usernames listed from winlogon.log above in any on the policies.  I do, however find these user accounts in Active Directory Users and Computers...

I am needing guidance in what I need to do to get things right...


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>