Group Policy deployment issues. Security policies were propagated with warning. 0x5 : Access is denied.

Question

Some Environment information
Client: Windows 11 21H2 22000.1219
Server: Windows Server 2019 1809

I am trying to delete 'Domain Users' member from the client side local administrators group. Please understand that this is the environment I was hired into. I've made a powershell script to do this, and it works if executed locally. If I try to deploy it through a scheduled task through GPolicy, some details listed below, I get the titled error message client side from SceCLi. I've checked out security-policies-were-propagated-with-warning-0x5-access-is-denied and we have everything as Not Defined within our DC's System Services.

Action: Create  
Account: NT AUTHORITY\SYSTEM  
Configured for: Windows Vista or Windows Server 2008 (Tried it for every configuration available)  

Now, I've created a powershell script to deploy and backup bitlocker keys from GPolicy before so I just copied what I did there so that I can run the task whenever GPupdate /force is run client side. The only sign that I can find that the script is not working is this Eventlog warning.

Security policies were propagated with warning. 0x5 : Access is denied.
Advanced help for this problem is available on https://support.microsoft.com. Query for "troubleshooting 1202 events".

I've checked out the only service I can see makes since in this script's use 'UserManager' and checked out it's sc sdshow output. that ;;;SY portion is present.

I'm eager to hear any responses. Thanks.

Answer 1

Hi,

Thank you for posting your query.

Kindly follow the steps provided below to resolve your issue.

Could you please follow the KB for the troubleshooting.

https://support.microsoft.com/en-us/help/324383/troubleshooting-scecli-1202-events

And you could run Gpupdate /force or Rsop.msc for more details to find the main cause.

http://blogs.microsoft.co.il/shukinoy/2014/11/03/security-policies-propagated-warning-0x5-access-denied/

Go to this link for your reference and other troubleshooting procedures https://social.technet.microsoft.com/Forums/windows/en-US/1806bc21-60c9-47d3-94a7-a1b40a5bf418/security-policies-were-propagated-with-warning-0x5-access-is-denied-in-server-2008?forum=winserverfiles

Do not hesitate to message us if you need further assistance.

If the answer is helpful kindly click "Accept as Answer" and up vote it.