This probably comes from assigning but not configuring an IPSEC policy
Check to see if this is the case.
If policies were assigned but then deleted you can probably assign an
item on the Default Domain Controllers policy and then close the
Then re-open the policy and unassign the IPSEC policy.
Use Secedit to refresh the machine policy.
Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no