Id de suceso: 1053

En mi opinion has debido restringir demasiado las políticas que has cambiado
mira haber si esto te vale.

We were getting Event Id 1053 in the Application event log "Windows cannot
determine the computer or user name. (Access is denied.). Group Policy
processing aborted.". We discovered that the error started to happen after a
reboot of a Windows Server 2003 DC. The DC had Event Id 529 logged after it's
reboot. The information in the 529 event contained the reason "Unknown user
name or bad password", a logon type of 3, and the logon process and
authentication process set to Kerberos.
We had the following group policy enabled in the Security settings "Audit:
Shut down system immediately if unable to log security alerts". The GPO
settings for the security event log were set to "Do not overwrite events
(clear log manually)". When the DC was rebooted, Windows Server 2003 was
setting the Crash On Audit Fail registry key
(HKLM\System\CurrentControlSet\Control\Lsa\crashonauditfail) to 2.
Note that no Crash On Audit Fail blue screen appeared and the security event
log was not full so there was no related message shown. We therefore had no
indication that the crash on audit fail registry key had been set to 2. With
this registry key set to 2 only administrators can log on to the DC. Setting
the value of this key to 0, changing the GPO's to disable "Audit: Shut down
system immediately if unable to log security alerts", and changing the
retention method of the security event log to "Overwrite events as needed"
solved the problem.


"webmaster" wrote:

Tipo de suceso: Error

Origen del suceso: Userenv

Categoría del suceso: Ninguno

Id. suceso: 1053

Fecha: 06/09/2006

Hora: 6:18:33

Usuario: NT AUTHORITY\SYSTEM

Equipo: SERVIDOR

Descripción:

Windows no puede determinar el nombre de usuario o de equipo. ( El usuario
especificado no existe. ). Se ha anulado el proceso de directiva de grupo.



A ver si alguien me puede ayudar por favor, seguramente he tocado alguna
politica de grupo que no debía, os cuento los antecedentes,tengo un servidor
con windows 2003 server, hace unos días estuve cambiando alguna politica de
grupo del dominiio y también cambié 2 veces el nombre de administrador, a
partir de entonces empecé a detectar este error en las auditorias, alguien
me puede dar alguna pista y que debo hacer, os adelanto que no tengo montado
ni el DNS ni DHCP server.



Gracias. Un saludo