Prev: Annoying Crashes on SBS
Next: owa in migration
From: Miles Li [MSFT] on 29 Jan 2009 05:37
Hello Lawrence,

Thank you for posting here.

According to your description, I understand that:

On your SBS 2008 server (not migrated from SBS 2003), you receive the error
"The User accounts cannot be added into GroupPolicy 'AllSBSUsers".

If I have misunderstood the problem, please don't hesitate to let me know.

Suggestions:
================
There is not a default group policy named AllSBSUsers. This is a issue in
the SBS 2008 environment that it shows a wrong (not exist) group policy.
From my experience, the problematic group policy object should be "Windows
SBS User Policy". The issue typically results from incorrect permission on
the policy. Please make sure that the SYSTEM account has been granted the
sufficient permissions on the "Windows SBS User Policy" group policy. To
check it:

1. Open the GPMC and locate the "Windows SBS User Policy" group policy in
Forest--->Domain--->SBS.local.
2. Click the "Windows SBS User Policy" group policy. In the right panel,
select the Delegation tab.
3. Verify whether there is a ACE granting SYSTEM account the "Edit
settings, delete, modify security" permissions.
4. If not, try to manually add ACE for SYSTEM account.

If the issue persists, please answer the following questions and collect
information for further investigation:

1. Does the error is logged every 20 minutes?

2. Try to collect the MPS report (PFE version) on the server for the
analyzing. The MPS Reporting Tool is utilized to gather detailed
information regarding a systems current configuration including event logs.
To collect the PFE log:

a). Please download MPS Reporting Tool (MPSRPT_PFE.EXE) from the following
link:
(http://www.microsoft.com/downloads/details.aspx?FamilyID=00ad0eac-720f-4441
-9ef6-ea9f657b5c2f&DisplayLang=en)

Please note: The link may be truncated when you read the E-mail. Be sure to
include all text between '(' and ')' when navigating to the download
location.

b). Right click MPSRPT_PFE.EXE and select Run as Administrator to run this
tool, and you will see a Command Window start up.

c). Please type Y with the message of <Include the MSINFO32 report?
(defaults to Y in 15 seconds)[Y,N]?

d). When the tool is done you will see an Explorer Window opening up the
%systemroot%\MPSReports\Setup\Reports\cab folder and containing a
<Computername>MPSReports.cab file. Then send the package to me at
v-mileli(a)microsoft.com for further investigation.

Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.





Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


First  |  Prev  | 
Pages: 1 2
Prev: Annoying Crashes on SBS
Next: owa in migration