|
Posted by ViNC3 via WinServerKB.com on January 28, 2008, 11:37 pm
Please log in for more thread options
Hi everyone,
I have just setup a new Domain Controller which will be a new Primary Domain
Controller.
everythings runs fine only one thing, when i tried to create a security
policy and apply it into the Server by using Security Configuration Wizard,
but after tick all the needs and all, it appear the error msg with :-
Cannot Apply Security Policy
The Security Configuration Wizard cannot continue because the security
policy could not be applied to the selected server.
Problem: unspecified error
When I view the log file, I see that the error is in the Extension
Microsoft.OS.Services. It says :
0x80070005 Error Configuring C:\WINDOWS\security\msscw\ConfigureFiles\
Services. inf
Access is denied.
0x80070005 Cannot complete extension processing: Microsoft.OS.Services
Access is denied.
The machine is Windows Server 2003 Enterprise with SP2
and it doesnt have any antivirus installed in it yet.
What should I do?
thanks in advance
--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-security/200801/1
|
|
Posted by Roger Abell [MVP] on January 29, 2008, 12:14 am
Please log in for more thread options
Did you look to see what the NTFS permissions are on the indicated
file C:\WINDOWS\security\msscw\ConfigureFiles\Services. inf
or for creating the file within indicated directory
?
Roger
> Hi everyone,
>
> I have just setup a new Domain Controller which will be a new Primary
> Domain
> Controller.
> everythings runs fine only one thing, when i tried to create a security
> policy and apply it into the Server by using Security Configuration
> Wizard,
> but after tick all the needs and all, it appear the error msg with :-
>
> Cannot Apply Security Policy
> The Security Configuration Wizard cannot continue because the security
> policy could not be applied to the selected server.
>
> Problem: unspecified error
>
> When I view the log file, I see that the error is in the Extension
> Microsoft.OS.Services. It says :
>
> 0x80070005 Error Configuring C:\WINDOWS\security\msscw\ConfigureFiles\
> Services. inf
> Access is denied.
>
> 0x80070005 Cannot complete extension processing: Microsoft.OS.Services
> Access is denied.
>
> The machine is Windows Server 2003 Enterprise with SP2
> and it doesnt have any antivirus installed in it yet.
>
> What should I do?
>
> thanks in advance
>
> --
> Message posted via WinServerKB.com
> http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-security/200801/1
>
|
|
Posted by ViNC3 via WinServerKB.com on January 29, 2008, 12:59 am
Please log in for more thread options Hi Roger,
Regarding the server, the server have installed McAfee Antivirus in it. sorry
about the mixup.
i have tried to open the file C:\WINDOWS\security\msscw\ConfigureFiles\
Services.inf
here is the whole thing i copied :
[Unicode]
Unicode=yes
[Version]
signature="$CHICAGO$"
Revision=1
[Service General Setting]
EDI Subsystem,4,""
ENTSSO,4,""
Microsoft.BizTalk.KwTpm.StsBizTalkAdapter.StsBizTalkAdapterService,4,""
RuleEngineUpdateService,4,""
ListManager,4,""
DMLService,4,""
PredictorService,4,""
IMAP4Svc,4,""
RESvc,4,""
MSExchangeES,4,""
MSExchangeIS,4,""
MSExchangeMGMT,4,""
MSExchangeMTA,4,""
MSExchangeSA,4,""
MSExchangeSRS,4,""
MSPOP3Connector,4,""
UN2,4,""
DRDAResync,4,""
NVAlert,4,""
NVRunCmd,4,""
PO005,4,""
SnaDdm,4,""
DDM001,4,""
DDM999,4,""
MngAgent,4,""
MQBridge,4,""
DDM6DB,4,""
SnaRpcService,4,""
SnaBase,4,""
SnaNetMn,4,""
SnaPrint,4,""
SnaServr,4,""
TN3270,4,""
TN5250,4,""
ISACtrl,4,""
ADAM_ISASTGCTRL,4,""
Fwsrv,4,""
ISASched,4,""
ISASTG,4,""
MSSQL$MSFW,4,""
SQLAgent$MSFW,4,""
MIIServer,4,""
MOM,4,""
SBCore,4,""
MSSQL$SBSMONITORING,4,""
SQLAgent$SBSMONITORING,4,""
WBLOGSVC,4,""
SMS_EXECUTIVE,4,""
SMS_SITE_BACKUP,4,""
SMS_SITE_COMPONENT_MANAGER,4,""
SMS_SQL_MONITOR,4,""
clisvc,4,""
SMS Hardware Inventory Agent Service,4,""
Wuser32,4,""
CcmExec,4,""
SMS_REPORTING_POINT,4,""
SMS_SERVER_LOCATOR_POINT,4,""
SMS_NT_LOGON_DISCOVERY_AGENT,4,""
SPSAlert,4,""
SPSAdmin,4,""
SharePointPSSearch,4,""
SSOSrv,4,""
MSSQL$SHAREPOINTPORTAL,4,""
SQLAgent$SHAREPOINTPORTAL,4,""
MSSQLSERVER,4,""
MSSQLServerADHelper,3,""
SQLSERVERAGENT,4,""
MSSQLServerOLAPService,4,""
ReportServer,4,""
SPTimer,4,""
MSSQL$SHAREPOINT,4,""
SQLAgent$SHAREPOINT,4,""
SrmSvc,4,""
SrmReports,4,""
IFSSVC,4,""
WECSVC,4,""
WinRM,4,""
zzSUA,4,""
SSNIS,4,""
mapsvc,4,""
nfssvc,4,""
Client for NFS,4,""
DFSR,4,""
6to4,4,""
AeLookupSVC,2,""
aspnet_state,4,""
AdtAgent,4,""
ADTServer,4,""
Alerter,4,""
ALG,3,""
AppMgmt,3,""
AppMgr,4,""
AudioSrv,4,""
browser,2,""
BINLSVC,4,""
BITS,2,""
CertSvc,4,""
cisvc,4,""
ClipSrv,4,""
ClusSvc,4,""
COMSysApp,4,""
CryptSvc,2,""
DcomLaunch,2,""
DFS,2,""
DHCP,2,""
DHCPServer,4,""
dmadmin,3,""
dmserver,2,""
DNS,2,""
DNSCache,2,""
elementmgr,4,""
ERSvc,2,""
EventLog,2,""
EventSystem,2,""
Fax,4,""
FPNW,4,""
Groveler,4,""
HelpSvc,2,""
HidServ,4,""
HTTPFilter,4,""
IAS,4,""
IASJet,4,""
IISAdmin,4,""
ImapiService,4,""
IRMon,4,""
IsmServ,4,""
kdc,2,""
lanmanserver,2,""
lanmanworkstation,2,""
LicenseService,4,""
lmhosts,2,""
LPDSVC,4,""
MacPrint,4,""
MacFile,4,""
Messenger,4,""
mnmsrvc,4,""
MSDTC,2,""
MSMQ,4,""
MSMQTriggers,4,""
MSSEARCH,4,""
MSSQL$UDDI,4,""
MQDS,4,""
MSFTPSVC,4,""
MSIServer,3,""
NetDDE,4,""
NetDDEDSDM,4,""
netlogon,2,""
Netman,3,""
NLA,3,""
NNTPSVC,4,""
NTfrs,2,""
NtLmSSP,3,""
NtmsSvc,3,""
NWCWorkstation,4,""
NwSapAgent,4,""
POP3SVC,4,""
PolicyAgent,4,""
PlugPlay,2,""
ProtectedStorage,2,""
RasAuto,4,""
RasMan,3,""
RDSessMgr,4,""
RemoteAccess,2,""
RemoteRegistry,2,""
Remote_Storage_Server,4,""
Remote_Storage_User_Link,4,""
RPCLocator,4,""
RPCSs,2,""
RSVP,4,""
RSoPProv,3,""
RQS,4,""
sacsvr,4,""
SamSs,2,""
SCardSvr,3,""
Schedule,2,""
seclogon,2,""
SENS,4,""
ShellHWDetection,2,""
SharedAccess,4,""
SimpTcp,4,""
SMTPSVC,4,""
SNMP,4,""
SNMPTRAP,4,""
Spooler,2,""
SQLAgent$UDDI,4,""
srvcsurg,4,""
stisvc,4,""
SwPrv,3,""
SysmonLog,2,""
TAPISrv,2,""
TermService,3,""
TermServLicensing,4,""
TFTPD,4,""
Themes,4,""
TlntSvr,4,""
Trksvr,4,""
TrkWks,2,""
Tssdis,4,""
UPS,4,""
UMWdf,3,""
VDS,3,""
VSS,3,""
W3SVC,4,""
W32Time,2,""
WDSServer,4,""
WebClient,4,""
WindowsSystemResourceManager,4,""
WinHTTPAutoProxySvc,3,""
WinMgmt,2,""
WINS,2,""
WmdmPmSN,4,""
wmi,4,""
WmiApSrv,3,""
WMServer,4,""
wuauserv,2,""
WZCSVC,4,""
xmlprov,4,""
Acronis VSS Provider,2,""
AcrSch2Svc,2,""
Alert Notification Server,2,""
CASDBEngine,2,""
CASDiscoverySvc,2,""
CASJobEngine,2,""
CASMsgEngine,2,""
CASSvcControlSvr,2,""
CASTapeEngine,2,""
CASUnivDomainSvr,2,""
CATIRPC,2,""
CA_LIC_CLNT,3,""
DbaRpcService,2,""
LogWatch,2,""
McAfeeFramework,2,""
McShield,2,""
McTaskManager,2,""
MSSQL$MS_ADMT,2,""
OnePointDomainAdminService,3,""
RemoteDbagent,2,""
SQLAgent$MS_ADMT,3,""
so, what should i do?
thanks
Regards,
Vince
Roger Abell [MVP] wrote:
>Did you look to see what the NTFS permissions are on the indicated
>file C:\WINDOWS\security\msscw\ConfigureFiles\Services. inf
>or for creating the file within indicated directory
>?
>
>Roger
>
>> Hi everyone,
>>
>[quoted text clipped - 28 lines]
>>
>> thanks in advance
--
Message posted via http://www.winserverkb.com
|
|
Posted by Roger Abell [MVP] on January 29, 2008, 8:52 am
Please log in for more thread options The content of the file is not relevant.
The message said access to that file is not allowed.
I asked if you have looked at the permissions set on the file.
Those are in the properties of the file, the security tab.
Roger
> Hi Roger,
>
> Regarding the server, the server have installed McAfee Antivirus in it.
> sorry
> about the mixup.
>
> i have tried to open the file C:\WINDOWS\security\msscw\ConfigureFiles\
> Services.inf
>
> here is the whole thing i copied :
>
<snipped off>
|
|
Posted by ViNC3 via WinServerKB.com on January 30, 2008, 1:53 am
Please log in for more thread options Hi Roger,
sorry i got it wrong, i have look into it.
The security shows that
administrator and SYSTEM have the right of full control on Services.inf
anything i should change?
thanks
regards,
Vince
Roger Abell [MVP] wrote:
>The content of the file is not relevant.
>The message said access to that file is not allowed.
>I asked if you have looked at the permissions set on the file.
>Those are in the properties of the file, the security tab.
>
>Roger
>
>> Hi Roger,
>>
>[quoted text clipped - 6 lines]
>>
>> here is the whole thing i copied :
>
><snipped off>
--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-security/200801/1
|
| Similar Threads | Posted | | Apply or modify password policy | December 26, 2006, 7:37 pm |
| Unable to apply patches | January 18, 2007, 6:20 am |
| SCW craps out during Apply - something about Firewall | September 17, 2007, 6:53 pm |
| Domain Controller Security Policy | August 12, 2005, 4:31 pm |
| Audit Policy (security logs) | August 20, 2007, 10:18 pm |
| data security policy examples | July 19, 2008, 7:05 pm |
| Win2k3 SP1 security policy changes - COM dies after SP1 install | August 1, 2005, 12:13 am |
| Accessing Local Security Policy Programatically | August 3, 2006, 11:35 am |
| Local Security Policy "Effective Settings" | September 1, 2006, 7:24 pm |
| Unable to Open Local Security Policy | September 1, 2006, 7:26 pm |
|
XML Sitemap