You cannot apply local security settings with MUI (281454)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional
This article was previously published under Q281454

SYMPTOMS

After you install Multilanguage Pack (MUI) and choose a preferred language for menus and dialog boxes, privileges that are defined in local security settings are not applied, and the following error messages appear in the Application event log:
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 10/16/1999
Time: 10:13:10 am
User: N/A
Computer: Computername
Description: Security policies are propagated with warning. 0x534 : No mapping between account names and security IDs was done. Please look for more details in TroubleShooting section in Security Help.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 10/16/1999
Time: 10:13:11 am
User: NT AUTHORITY\SYSTEM
Computer: Computername
Description: The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (1332).

CAUSE

When you choose a language in MUI other than English, editing group policies causes the account names for the default accounts in the Group Policy files to be replaced with the localized names. This causes the group polices not to be applied on English installations.

RESOLUTION

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that this article describes. Apply it only to systems that are experiencing this specific problem.

To resolve this problem, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question. The English version of this fix should have the following file attributes or later: 
   Date        Time    Version      Size     File name
   --------------------------------------------------
   4/20/2001  03:39p   5.0.2184.1   30,208   Lsasrv~1.br
   4/20/2001  03:39p   5.0.2184.1   29,184   Lsasrv~1.da
   4/20/2001  03:39p   5.0.2184.1   31,744   Lsasrv~1.es
   4/20/2001  03:39p   5.0.2184.1   28,672   Lsasrv~1.fi
   4/20/2001  03:39p   5.0.2184.1   33,280   Lsasrv~1.fr
   4/20/2001  03:39p   5.0.2184.1   33,280   Lsasrv~1.ger
   4/20/2001  03:39p   5.0.2184.1   31,232   Lsasrv~1.hu
   4/20/2001  03:39p   5.0.2184.1   32,256   Lsasrv~1.it
   4/20/2001  03:39p   5.0.2184.1   17,920   Lsasrv~1.jpn
   4/20/2001  03:39p   5.0.2184.1   32,256   Lsasrv~1.nl
   4/20/2001  03:39p   5.0.2184.1   28,160   Lsasrv~1.no
   4/20/2001  03:39p   5.0.2184.1   29,696   Lsasrv~1.pl
   4/20/2001  03:39p   5.0.2184.1   31,232   Lsasrv~1.pt
   4/20/2001  03:39p   5.0.2184.1   29,184   Lsasrv~1.ru
   4/20/2001  03:39p   5.0.2184.1   28,672   Lsasrv~1.sv
   4/18/2001  08:46p   5.0.2167.1   52,224   Netplw~1.br
   4/18/2001  08:46p   5.0.2167.1   51,200   Netplw~1.da
   4/18/2001  08:46p   5.0.2167.1   52,736   Netplw~1.es
   4/18/2001  08:46p   5.0.2167.1   50,176   Netplw~1.fi
   4/18/2001  08:46p   5.0.2167.1   57,856   Netplw~1.fr
   4/18/2001  08:46p   5.0.2167.1   56,320   Netplw~1.ger
   4/18/2001  08:46p   5.0.2167.1   53,760   Netplw~1.hu
   4/18/2001  08:46p   5.0.2167.1   52,736   Netplw~1.it
   4/18/2001  08:46p   5.0.2167.1   35,328   Netplw~1.jpn
   4/18/2001  08:46p   5.0.2167.1   54,272   Netplw~1.nl
   4/18/2001  08:46p   5.0.2167.1   49,152   Netplw~1.no
   4/18/2001  08:46p   5.0.2167.1   52,736   Netplw~1.pl
   4/18/2001  08:46p   5.0.2167.1   55,296   Netplw~1.pt
   4/18/2001  08:46p   5.0.2167.1   50,176   Netplw~1.ru
   4/18/2001  08:46p   5.0.2167.1   50,688   Netplw~1.sv
Note that this hotfix is not included in any Windows 2000 service pack. Regardless of the service pack that you have installed, if you are experiencing this MUI issue, you must install this hotfix. If you install additional MUI languages by using MUI setup after you first install MUI, you must reinstall the hotfix.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the following article number to view the article in the Microsoft Knowledge Base:

265173 The Datacenter Program and Windows 2000 Datacenter Server product

For additional information about how to install multiple hotfixes with only one reboot, click the following article number to view the article in the Microsoft Knowledge Base:

296861 How to install multiple Windows updates or hotfixes with only one reboot

After you install MUI and modify the default language for menus and dialog boxes, all well-known security IDs (SIDs) such as Everyone, Authenticated Users, Interactive, and so on, are translated to the new language.

Local security settings are stored in the %SystemRoot%\Security\Secedit.sdb file, which is actually a Jet database. User and group accounts are stored as strings, not as SIDs. So, for example, after you change the language with MUI, the "Everyone" string cannot be mapped to a valid SID and privileges cannot be applied if they previously included an account whose name has changed. For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the following article number to view the article in the Microsoft Knowledge Base:

249149 Installing Microsoft Windows 2000 and Windows 2000 hotfixes

Modification Type:MinorLast Reviewed:10/18/2005
Keywords:kbHotfixServer kbQFE kbbug kbfix kbQFE kbWin2000PreSP3Fix KB281454
©2004 Microsoft Corporation. All rights reserved.