An extended error has occurred

Error an extended error has occurred

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Answered by:

Question

I am trying to modify the «Allow Login Locally» local security policy in Local Policy -> User Rights assignement. When I add in any domain global group, and click OK, I get the error An Extended Error has occurred. Failed to save local policy database. The same error happens on any security policy when I try to add a domain global group (I’ve tried 3 different ones).

The computer I am making this change on is Windows 7 professional. The domain ADS server is Windows 2000.

1) I have booted the computer in safe mode (with network) and verified the security database at %windir%SecurityDatabaseSecedit.sdb via the esentutl /g command. It checks out OK.

2) I have also searched the file at %systemroot%securitylogswinlogon.log for 1332.

3) I set «Network Security: LAN Manager authentication level» policy to «Send LM & NTLM – use NTLMV2 session security if negotiated» and «Send LM & NTLM» and then rebooted the system (just to be sure) before re-trying to change the «Allow Login Locally» policy. Before I changed the setting, it was just «Not Defined».

This problem happens on all 3 Windows 7 professional systems that I have joined to the domain. All three systems are brand new installs with very little customization, and no other applications yet installed.

I have also checked the security on the Secedit.sdb file. It looks as I expected with SYSTEM and administrators having full access.

I have tried making the modifications using the domain administrator account, and the local administrator account.

Источник

Error an extended error has occurred

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Answered by:

Question

Error message:

The mapped network drive could not be created because the following error has occurred: An extended error has occurred.

Things I have checked:

Time/date on server and local machine

User account can map them successfully on other PCs

Only a problem when using the fully qualified path to the server. Mapping by IP address works.

Flushed and re-populated DNS cache

Rebooted multiple times

Logon script that normally maps drives is correct

Answers

What the error code or message you get in your issue? Is there some event logs related to the issue?
You may run “net use” command. For example:
To assign the disk-drive device name E: to the Letters shared directory on the \Financial server, type:
net use e: \financialletters
Meanwhile, please open an elevated command and refresh DNS and reset Winsock.
>ipconfig /flushdns
>netsh winsock reset

I suggest you post the error code or event logs in the forum.

1. What you get when you issue

2. Would you catch the network traffic by network monitor.

3. Are there any traces in Event logs?

What the error code or message you get in your issue? Is there some event logs related to the issue?
You may run “net use” command. For example:
To assign the disk-drive device name E: to the Letters shared directory on the \Financial server, type:
net use e: \financialletters
Meanwhile, please open an elevated command and refresh DNS and reset Winsock.
>ipconfig /flushdns
>netsh winsock reset

I suggest you post the error code or event logs in the forum.

The mapped network drive could not be created because the following error has occurred: An extended error has occurred.

That is the error message, word for word. It’s not very helpful, is it. No code or description or anything. No event log that I can find (weird). Like I said, I already tried to flush DNS. Just tried to reset winsock and it didn’t change anything, either. Net use produces the exact same results as mapping through windows explorer.

Unfortunately I’m going to have to call this issue closed, it was the CEO’s PC and he just got fed up and had us buy him a new one. He needed it anyways, the computer was pretty old and slow. Thanks for the help.

This solved the problem for me:

(When I did net use \servershare I got this error: System error 2148073478 has occurred.)

Yes this worked perfectly for me

This fixed it for me.

For some reason, a user suddenly cannot use the «NET USE» command to map network drives. Windows logon is working, but accessing network shares become very strange, with «System Error 2221 has occurred» message. This probably is a stored credential problem. I also got error when trying to use a UNC path with the DNS name «\Server1Share1′ but it will work if you use an IP based path «\192.168.0.123share1»

SOLUTION: Press your Windows’ Start / Launch, in «Search programs and files» field type «Credential Manager» and you should see it shows up on the list. Run it.

Check the stored credentials and remove related credentials, by click on the «Remove from vault». Now, try your NET USE command to map drives again.

Источник

Error an extended error has occurred

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Answered by:

Question

On our Domain Controller running Server 2008 R2 I am seeing an event 1202 with an extended error of 0x4b8. After I run gpupdate /force, this is what is entered in the winlogon file.

Process GP template gpt00001.inf.

This is the last GPO : domain policy is ignored on DC.
——————————————-
Friday, July 10, 2015 9:53:09 AM
Administrative privileged user logged on.
Parsing template C:Windowssecuritytemplatespoliciesgpt00001.inf.
Error 1208: An extended error has occurred.
Error writing info for SeAssignPrimaryTokenPrivilege.
Error 1208: An extended error has occurred.
Error converting SeAssignPrimaryTokenPrivilege.
Error 1208: An extended error has occurred.
Error converting section Privilege Rights.
—-Configuration engine was initialized with one or more errors.—-

—-Un-initialize configuration engine.

Any Idea what I need to do to resolve this?

Answers

0x4b8: An extended error has occurred.

The 0x4b8 error is generic and can be caused by a number of different problems. To troubleshoot these errors, follow these steps:
Enable debug logging for the Security Configuration client-side extension. To do this:
Start Registry Editor.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogonGPExtensions
On the Edit menu, click Add Value, and then add the following registry value:
Value name: ExtensionDebugLevel
Data type: DWORD
Value data: 2
Quit Registry Editor.
Refresh the policy settings to reproduce the failure. To refresh the policy settings, type the following at the command prompt, and then press ENTER:
secedit /refreshpolicy machine_policy /enforce
This creates a file that is named Winlogon.log in the %SYSTEMROOT%SecurityLogs folder.
See the following Microsoft Knowledge Base articles. These articles describe known issues that cause the 0x4b8 error. Click the following article numbers to view the articles in the Microsoft Knowledge Base:

[{«Type»:»MASTER»,»Line of Business»:{«code»:»LOB57″,»label»:»Power»},»Business Unit»:{«code»:»BU058″,»label»:»IBM Infrastructure w/TPS»},»Product»:{«code»:»SWG60″,»label»:»IBM i»},»Platform»:[{«code»:»PF012″,»label»:»IBM i»}],»Version»:»7.1.0″}]