RE: 2k server problem

From: Moorhouse, Walt P (WaltPMoorhouse@eaton.com)
Date: 03/12/02 

From: "Moorhouse, Walt P" <WaltPMoorhouse@eaton.com>
To: 'Daniel Ferguson' <daniel.ferguson@willowmead.org>, focus-ms@securityfocus.com
Date: Tue, 12 Mar 2002 08:17:15 -0500

Daniel,

I have seen a similar problem before on an NT 4 server we had. Some of the
services we had installed had a monitor program that referenced the server
by it's UNC path, i.e. \\servername. When I changed the name of the server,
it fouled these up. Also another possibility (and I hope you wouldn't do
this, but I'll say it just in case) is some services (virus scanners in
particular) want to run as system or admin, and you or another admin may
have installed it and told it to run as the built in administrator account.
If you changed this, it could foul it up. I would recommend changing one or
both of those things back and seeing if the problem goes away. If it does,
then you can search the registry and look through your services for ones
that reference the server by it's UNC name. Also, if the password is
causing issues, you should go through your services and see if any are using
the built-in admin account. If so, I recommend creating an obscure local
account for them to use. I know these things seem trivial, but I have oft
seen them overlooked. I hope this helps.

Good Luck,
WPM

-----Original Message-----
From: Daniel Ferguson [mailto:daniel.ferguson@willowmead.org]
Sent: Monday, March 11, 2002 1:33 PM
To: focus-ms@securityfocus.com
Subject: 2k server problem

Hi, ive got a windows 2000 server running iis 5 with sp2 and all the latest
hotfixes.
Ive run lockdown and the hisecweb.inf file on the server to secure it. All
was working fine untill this afternoon.
I needed to rename the computer, and the administrator account. Now being
lazy i did both these things at the same time -and- changed the password for
the admin account, i then rebooted the machine. Now it took a very long time
to shutdown, in the region of a few minutes, and when it came up i had the
services failed to load error. When i logged into the computer to check the
event viewer, i could see the list of events but couldnt see the detail
behind them, and event viewer refused to close saying windows were still
open. The stopped services would not load due to dependancy issues.

I would be very greatful of any tips anyone might have to fix this problem
without having to reinstall the operating system. That'll teach me to cut
corners by doing all my changes at once :)

Thanks, Daniel Ferguson

Relevant Pages

  • Re: Re-Post - "the trust relationship between this workstation and the
    ... "the trust relationship between this workstation and the primary domain ... only problem is adding a new user account on the station. ... Client computer must use STRICTLY the INTERNAL DNS server which can ... Attr: subschemaSubentry ...
    (microsoft.public.windows.server.active_directory)
  • Re: Same question, still no answer!!!
    ... Sounds then like we are all paying for a feature set only large companies ... The "proxy server" pc is actually an older box stuffed ... Expectation #1) keep the ethernet more or less as is. ... The kids account would be ...
    (microsoft.public.windowsxp.basics)
  • Re: Re-Post - "the trust relationship between this workstation and the
    ... "the trust relationship between this workstation and the primary domain ... only problem is adding a new user account on the station. ... This would be on the DNS server 172.20.100.2 ... Attr: subschemaSubentry ...
    (microsoft.public.windows.server.active_directory)
  • Sending email to mydomain.com
    ... server will appear as undeliverable. ... This happens because you are using the POP3 connector... ... an NDR when an account doesn't exist). ... >different from the user account names for the exchange ...
    (microsoft.public.windows.server.sbs)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... Everytime I attempt to login under Basic Authentication, ... IUSR_blah account. ... the anonymous user impersonated by the IIS Server is the ... > Event Viewer Security log. ...
    (microsoft.public.inetserver.iis.security)
Quantcast