Active Directory Killing > 2003

[l310564]

Hi,

I have an issue which i think is to do with windows server 2000 active directory (This is because i was fiddling with it when all the problems started and i can't remember what i did).

I have a 2000 server acting as my domain controller with 40 odd pc's, all, except 1 which runs vista business edition, run XP. I also have a 2003 server and a windows 2008 web server.

All the windows XP machines are fine, all the other operating systems get the same issue.

The problem is that the permissions on the services seem to change preventing certain services starting (DHPC Client being the main one). When I try to start the DHPC client manually I get the error access denied what ever account the service is running under.

I have tried a complete reinstall of the windows 2008 server, which worked fine until I joined it to the domain and loaded a restore point on the vista machine which solved the problem for a couple of days (until it picked up the changes to the active directory would be my guess).

Any ideas as to which settings I have changed in the active directory to cause these problems would be appreciated, or any other ideas for that matter as I’m completely flummoxed with this.

Thanks Hugh


If knowlege can create problems it is not through ignorance that we will solve them.

Isaac Asimov

 

[Titleist]

l310564,

First place I'd check is a GPO setting,

Computer Config/Windows Settings/Security Settings/System Services.

See if any services have been altered by startup and/or permission type.


John

 

[dberg35]

I also agree look through Group Policy sounds like something is replicating down. Also check event logs on the pc's that are having the issues.

 

[l310564]

Thank you both for your replies.

Ok the Computer Config/Windows Settings/Security Settings/System Services. settings in the GP all state that they are not defined, is this correct?

Here are some of the event log errors i'm getting on both the vista and 2008 computers.

Windows could not record the Resultant Set of Policy (RSoP) information for the Group Policy extension <Security>. Group Policy settings successfully applied to the computer or user; however, management tools may not report accurately.

The DHCP Client service is shutting down. The following error occurred : Access is denied.

The Telephony service failed to start due to the following error:
A privilege that the service requires to function properly does not exist in the service account configuration. You may use the Services Microsoft Management Console (MMC) snap-in (services.msc) and the Local Security Settings MMC snap-in (secpol.msc) to view the service configuration and the account configuration.

The Remote Access Connection Manager service depends on the Telephony service which failed to start because of the following error:
A privilege that the service requires to function properly does not exist in the service account configuration. You may use the Services Microsoft Management Console (MMC) snap-in (services.msc) and the Local Security Settings MMC snap-in (secpol.msc) to view the service configuration and the account configuration.

and here are some of the errors i'm getting on the 2003 computer.

The DHCP Client service terminated with the following error: Access is denied.

The Distributed Transaction Coordinator service terminated with service-specific error 3221229584 (0xC0001010).

The Windows Internal Database (MICROSOFT##SSEE) service terminated with service-specific error 3417 (0xD59).

The Performance Logs and Alerts service terminated with service-specific error 2003 (0x7D3).

The Distributed Transaction Coordinator service terminated with service-specific error 3221229584 (0xC0001010).

etc......

Are there any other settings with in the GP that i should be looking at and why is it not effecting xp?

Cheers,

Hugh


If knowlege can create problems it is not through ignorance that we will solve them.

Isaac Asimov

 

[dberg35]

Ok looks like you really didn't review Group Policy. To do this you need to go to the domain and right click and then edit. This will get you to GP and be able to review. Also in the event viewer if there are errors it will give you an event ID number and that you can google to see what it is.