Click here to get back home

gpupdate /force killed my DC

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
gpupdate /force killed my DC Coy 10-31-2007
Posted by Coy on October 31, 2007, 7:03 pm
Please log in for more thread options
I was adding permissions to a specific user on my Win2K3 box and decided to
user gpupdate /force to apply the new permissions to the user. When I
rebooted, most of my services failed to start. Now even the Administrator
account doesn't have permissions to either Domain Controller Security Policy
or Domain Security Policy. When I try to use Active Directory User's and
Groups I get "Naming information cannot be located because: The specified
domain either does not exist or could not be contacted." Since most of my
services are dead, I don't have any network connections. When I tried to
use dcpromo to demote the DC, it quit indicating that it couldn't use the
File Replication service because it depended on other service (which aren't
running.)

What happened? How can get my services running a become a real Administrator
with enough power to get myself out of this mess without re-installing
Windows?

Thanks



Posted by Steven L Umbach on October 31, 2007, 7:24 pm
Please log in for more thread options
I really doubt that gpudate killed your server and that it was a coincidence
unless you had recently implemented policy to disable needed services
somehow. Also Gpudate is used to refresh Group Policy and has nothing to do
with refresh permissions for an object unless you did that via Group Policy.
Maybe if you could explain in more detail exactly what you did someone can
help. If you can access the logs via Event Viewer see if any errors/warnings
in the system and application logs can help. If you have a recent backup of
the System State for the domain controller that could be an option to try
and repair things by restoring it.

Steve.

>I was adding permissions to a specific user on my Win2K3 box and decided to
>user gpupdate /force to apply the new permissions to the user. When I
>rebooted, most of my services failed to start. Now even the Administrator
>account doesn't have permissions to either Domain Controller Security
>Policy or Domain Security Policy. When I try to use Active Directory User's
>and Groups I get "Naming information cannot be located because: The
>specified domain either does not exist or could not be contacted." Since
>most of my services are dead, I don't have any network connections. When I
>tried to use dcpromo to demote the DC, it quit indicating that it couldn't
>use the File Replication service because it depended on other service
>(which aren't running.)
>
> What happened? How can get my services running a become a real
> Administrator with enough power to get myself out of this mess without
> re-installing Windows?
>
> Thanks
>
>



Similar ThreadsPosted
Force Lockout Session October 21, 2007, 10:11 am
"Force shutdown from a remote system" October 13, 2006, 3:26 pm
How to force User log off when time expires? July 20, 2007, 5:48 am
Force desktop icons using Group Policy? December 22, 2005, 12:56 pm
Automatically force propagation of NTFS permissions...? November 24, 2006, 2:55 am
blocking brute force login attempts November 26, 2007, 2:09 pm
Super Tips - Free Windows Server Firewall with Brute Force Detecti September 2, 2005, 5:25 pm
Need solution to force all passwords in an OU to exipre, thereby forcing users to change password immediately July 5, 2006, 5:12 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap