Our instance of Systems Center Operations Manager 2007 R2 began reporting the following error from one of our Sharepoint servers:
“Windows cannot determine the user or computer name. (The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you. ). Group Policy processing aborted.”
Apparently this is the result of a logged on terminal services user that disconnected their session instead of logging off and has since been disabled in active directory. Logging onto the affected Sharepoint server and forcing the disconnected session off resolves the issue. Thank you Google!