报错如下：
Log Name: Application
Source: SceCli
Date: 10/28/2018 4:03:07 PM
Event ID: 1202
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: DC01.domain.com
Description:
Security policies were propagated with warning. 0x534 : No mapping between account names and security IDs was done.
Advanced help for this problem is available on http://support.microsoft.com. Query for "troubleshooting 1202 events".
解决方案如下：
Use RSoP to identify the specific User Rights, Restricted Groups, and Source GPOs that contain the problem accounts:
a. Start -> Run -> RSoP.msc
b. Review the results for Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment and Computer Configuration\Windows Settings\Security Settings\Local Policies\Restricted Groups for any errors flagged with a red X.
c. For any User Right or Restricted Group marked with a red X, the corresponding GPO that contains the problem policy setting is listed under the column entitled "Source GPO". Note the specific User Rights, Restricted Groups and containing Source GPOs that are generating errors.
我基本上通过备份GPO来解决这个问题，然后从“默认域控制器策略”GPO中删除“DefaultAppPool”或“Classic .Net AppPool”的所有实例。到目前为止，没有伤害。我们将看到当Exchange服务器下次重新启动时，OWA仍然可用。我确定它会处理错误，因为我做了一个GPUpdate / force并且日志显示所有策略都已成功应用。