Security Policy Issues

[GrantThomas]

Hello, I have already reviewed most KB articles on this problem I havening. One of my DC/GC servers isnt updated its policies. I looked at the security database file for its local policy and hasnt been touched since 11/26/2007.

My question is since this is a one of my Global Catalog server I dont want to repair the secpolicy database because I am afraid it will mess up the GPO. If that isnt a possibility then I can use the utility to repair it. I dont have a backup of that file that I could revert too so that wont work, but I was thinking I could take that same file from another Global Catalog server and replace it, but not sure of what will happen. I will include the articles I have read about this issue but none of them were done on a GC server.

http://support.microsoft.com/kb/278316

 

[ITPangaeaArchitect]

what does the FRS log say? what errors are in there?

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.

 

[GrantThomas]

Thanks for the reply, I acutally just went ahead and replaced the local security db file from another GC/DC and it updated just fine after that.

 

[ITPangaeaArchitect]

yea

theres no harm in correcting the local DB, especially on a DC, since its effective settings come from the default domain controllers policy 9 times out of 10.

glad to hear you got it fixed

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.