Click here to get back home

corrupted local security database

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
corrupted local security database Neil 01-05-2007
Posted by Neil on January 5, 2007, 3:44 pm
Please log in for more thread options
Hi,

I have a corrupted local security database. I try to do the following steps
in order to get the server back to original security configuration using
setup security.inf file,but get the following error message.

"An extended error has occurred, import failed"

Any thoughts?

thanks,
Neil




Posted by Jesper on January 5, 2007, 6:31 pm
Please log in for more thread options
First, "setup security.inf" is merely a log file. It is NOT a security
template that can, or should, be used to return a system to its original
state.

Second, no security template can return you to the original state of the
system. This is partially because nobody knows exactly what all defaults are,
and even if that were known, the functionality to restore them has not been
defined.

Third, which security database has been corrupted, and what is the symptom?
The security configuration editor databases are not critical to system
operations. You can just delete the one that is giving you trouble.

"Neil" wrote:

> Hi,
>
> I have a corrupted local security database. I try to do the following steps
> in order to get the server back to original security configuration using
> setup security.inf file,but get the following error message.
>
> "An extended error has occurred, import failed"
>
> Any thoughts?
>
> thanks,
> Neil
>
>
>
>

Posted by Roger Abell [MVP] on January 6, 2007, 1:33 am
Please log in for more thread options
> First, "setup security.inf" is merely a log file. It is NOT a security
> template that can, or should, be used to return a system to its original
> state.
>

I agree.
But I just wanted to share a "view from the outside".

People are used to information such as
http://support.microsoft.com/kb/816585

Your message, while much more accurate, obviously conflicts
with the KB, especially in a quick reading of it. (In all fairness
this KB, or rather its predecessors, has/have seen multiple revs
moderating the message toward yours.)

There is something of an uphill battle between realities and
the state of the documentation (MS and 2nd hand) available.

Roger



Posted by Jesper on January 6, 2007, 12:43 pm
Please log in for more thread options
I know. I spent a fair bit of time in the year before I left MS trying to get
that message fixed and rewriting KBs so they were accurate. Setup
Security.inf was originally meant as a log file, but it never really worked.

"Roger Abell [MVP]" wrote:

> > First, "setup security.inf" is merely a log file. It is NOT a security
> > template that can, or should, be used to return a system to its original
> > state.
> >
>
> I agree.
> But I just wanted to share a "view from the outside".
>
> People are used to information such as
> http://support.microsoft.com/kb/816585
>
> Your message, while much more accurate, obviously conflicts
> with the KB, especially in a quick reading of it. (In all fairness
> this KB, or rather its predecessors, has/have seen multiple revs
> moderating the message toward yours.)
>
> There is something of an uphill battle between realities and
> the state of the documentation (MS and 2nd hand) available.
>
> Roger
>
>
>

Posted by Neil on January 8, 2007, 12:24 pm
Please log in for more thread options
Third, which security database has been corrupted, and what is the symptom?
The security configuration editor databases are not critical to system
operations. You can just delete the one that is giving you trouble.

1. I installed Enterprise Memberserver baseline security on the server.
2. Application Event logs show 1010, 105, 454, 489

I am not sure whether this is the reason that I am unable to install IIS
6.0. As, I try to install IIS 6.0 and it is prompting me for the following
file

iisapps.vbs

Copy files from:
c:\windows\ServicePackFiles\i386

It looks that this file is there, but it is not picking it up from this
location.

What was tried?

1. I tried resinstalling SP1 it did not help me.
2. I deleted the Ent Security database from the template folder, rebooted
the system. (You said delete the sec file, I am assuming that you are asking
me to delete it from the template folder correct, so that it will not use
that file?) I still get the above event logs.

So any asst would be helpful.

thanks,
Neil





> First, "setup security.inf" is merely a log file. It is NOT a security
> template that can, or should, be used to return a system to its original
> state.
>
> Second, no security template can return you to the original state of the
> system. This is partially because nobody knows exactly what all defaults
> are,
> and even if that were known, the functionality to restore them has not
> been
> defined.
>
> Third, which security database has been corrupted, and what is the
> symptom?
> The security configuration editor databases are not critical to system
> operations. You can just delete the one that is giving you trouble.
>
> "Neil" wrote:
>
>> Hi,
>>
>> I have a corrupted local security database. I try to do the following
>> steps
>> in order to get the server back to original security configuration using
>> setup security.inf file,but get the following error message.
>>
>> "An extended error has occurred, import failed"
>>
>> Any thoughts?
>>
>> thanks,
>> Neil
>>
>>
>>
>>



Similar ThreadsPosted
An extended error has occurred. Failed to save Local Policy Database. August 15, 2005, 2:45 pm
Oracle database security April 15, 2008, 1:48 am
Problems with backing up security database. Intrusion? February 10, 2006, 12:56 pm
Unable to read any security database file February 7, 2007, 2:31 pm
Domain Local Security vs Global Security vs Universal Security Groups October 16, 2006, 1:26 pm
Secure your Oracle database from hackers April 15, 2008, 1:47 am
Extracting information from secedit database files (sdb) December 15, 2005, 4:28 pm
Moving server 2003 CA database file location November 6, 2006, 3:35 pm
Re: looking for individuals to run local security groups March 4, 2008, 5:17 pm
Accessing Local Security Policy Programatically August 3, 2006, 11:35 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap