Hello, I have Windows Server 2008 R2. I am receiving Event 1202, SceCli: Security policies were propagated with warning. 0x534 : No mapping between account names and security IDs was done. I get this error: Cannot find IIS AppPool\Classic .NET AppPool. I reviewed this article http://support.microsoft.com/kb/977695. I found that I do have the "IIS AppPool\" prefix in front of my Classic .NET AppPool. The hotfix when run says it is not applicable for this computer. I am at a loss how to resolve this issue. Any assistance would be greatly appreciated. Michael

Hello, See if this helps: Open command prompt on domain controller and run following commands 1. dcgpofix /ignoreschema and press yes at both prompts. 2. gpupdate The refresh event viewer. Refer to: Windows 2008 - Event ID 1202,SceCli http://social.technet.microsoft.com/Forums/en/windowsserver2008r2general/thread/285d63f8-254a-419e-a184-03423046edad Thanks Zhang

Hello, Have you managed to fix this? Regards, Zhang TechNet Subscriber Support

Hello Zhang, I have not tried that solution as of yet. I had read that it might be dangerious to run that command on a production system. Can you give any insight if it is safe? The IIS AppPool\Classic .NET AppPool is the account that the winlogon.log shows as the problem. I am running IIS 7.5 and IIS 6. The IIS 6 is only used for SMTP Virtual Server and only out outbound traffic. The article you refered to references Exchange server. I am not sure if that makes a difference. Thank you for your assistance. Sincerely, Michael

I have not fixed this issue yet. I am waiting on a reply to my last post. Please kindly reply. Thank You. Michael

Hi Michael, We will involve a higher level support guy to follow up. Regards, Zhang TechNet Subscriber Support If you are TechNet Subscriptionuser and have any feedback on our support quality, please send your feedback here

it seems you selected an incorrect version of the hotfix, please download it according to your CPU and try again.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I am using the 64 bit version based on my processor / Windows version. I get the same message as in my original post.

Please review my original post. According to that aticle I should not need the hotfix in the first place but I am still receving those errors in the log. Since I can not apply the hotfix I can't check to see if the hotfix will solve the problem. Mr. Zhang mentioned running following commands 1. dcgpofix /ignoreschema and press yes at both prompts. 2. gpupdate 3. The refresh event viewer. Per another article but is it safe to run that command on a production system. I seen some mention that it may not be safe. The IIS AppPool\Classic .NET AppPool is the account that the winlogon.log shows as the problem. I am running IIS 7.5 and IIS 6. The IIS 6 is only used for SMTP Virtual Server and only out outbound traffic. The article you refered to references Exchange server. I am not sure if that makes a difference. Thank you for your assistance. Sincerely, Michael

I think current issue is you are not able to apply the hotfix. once you apply the hotfix, this issue can be resolved.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I do not the purpose of "dcgpofix /ignoreschema", this command just reset the default GPO. do you add "IIS AppPool\Classic .NET AppPool" in any policy? what is the policy? did you try to add quotation marks ?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.