Re: Win2003 RPC failure after Hotfix

JGrimshaw_at_ASAP.com
Date: 10/17/03

  • Next message: Roy Pait: "RE: RPC Scan Issues"
    To: "Klassen, Matthew" <Matthew.Klassen@aer.com.au>
    Date: Fri, 17 Oct 2003 10:22:37 -0500
    
    

    I experienced these issues, too, but I did not apply the patches to our
    PDC emulator (yes, we are Windows 2003 with AD). I applied them to other
    domain controllers.

    So far, these issues haven't caused any problems. But I did save the
    following link with a work around:

    http://support.microsoft.com/default.aspx?scid=kb;en-us;314494&sd=ee

    That was for the 1030. I actually logged a few other messages, but
    experienced no real problems.

    "Klassen, Matthew" <Matthew.Klassen@aer.com.au>
    10/16/2003 07:32 PM

    To
    Focus-MS <focus-ms@securityfocus.com>
    cc

    Subject
    Win2003 RPC failure after Hotfix

    We are a fairly small shop with two sites, three DC's all running Win2003.
    I installed the following Hotfixes on our PDC emulator and afterwards our
    network was in complete havoc. A number of services were failing on the
    PDC
    with DNS, Active Directory and numerous other errors.

    After massive amounts of stress I went back and uninstalled the two
    patches,
    and reconnected active directory from the other DCs it all seems back on
    top
    now.

    Has anyone else had problems with these patches? Or have similar eventlog
    messages? Or even more importantly does anyone think that the problem
    could
    be deeper?

    Regards,

    Matthew Klassen

    After Installing the following Hotfixes
    ---------------------------------------
    KB828750 - Cumulative Patch for Internet Explorer
    KB828026 - Windows Media Player URL Script Command Behaviour

    EventLog Messages:
    -------------------
    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1030
    Date: 16/10/2003
    Time: 17:49:00
    User: NT AUTHORITY\SYSTEM
    Computer: ----
    Description:
    Windows cannot query for the list of Group Policy objects. Check the event
    log for possible messages previously logged by the policy engine that
    describes the reason for this.
    --------------------
    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1097
    Date: 16/10/2003
    Time: 17:49:00
    User: NT AUTHORITY\SYSTEM
    Computer: ----
    Description:
    Windows cannot find the machine account, The Local Security Authority
    cannot
    be contacted .
    ---------------------
    Event Type: Information
    Event Source: ESENT
    Event Category: General
    Event ID: 101
    Date: 16/10/2003
    Time: 17:04:51
    User: N/A
    Computer: ----
    Description:
    svchost (1052) The database engine stopped.
    --------------------

    ---------------------------------------------------------------------------
    FREE Whitepaper: Better Management for Network Security

    Looking for a better way to manage your IP security?
    Learn how Solsoft can help you:
    - Ensure robust IP security through policy-based management
    - Make firewall, VPN, and NAT rules interoperable across heterogeneous
    networks
    - Quickly respond to network events from a central console

    Download our FREE whitepaper at:
    http://www.securityfocus.com/sponsor/Solsoft_focus-ms_031015
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    FREE Whitepaper: Better Management for Network Security

    Looking for a better way to manage your IP security?
    Learn how Solsoft can help you:
    - Ensure robust IP security through policy-based management
    - Make firewall, VPN, and NAT rules interoperable across heterogeneous
    networks
    - Quickly respond to network events from a central console

    Download our FREE whitepaper at:
    http://www.securityfocus.com/sponsor/Solsoft_focus-ms_031015
    ---------------------------------------------------------------------------


  • Next message: Roy Pait: "RE: RPC Scan Issues"

    Relevant Pages

    • SecurityFocus Microsoft Newsletter #51
      ... Subject: SecurityFocus Microsoft Newsletter #51 ... If you're running a Windows network, then this is the intensive 3-day ... Specialist in Microsoft's Security Services Partner Program, ... Platforms: Solaris and Windows NT ...
      (Focus-Microsoft)
    • RE: file sharing on network with vista and xp home computer
      ... Since the contact through microsoft email has been 24 hours+ for each reply, ... security settings for the root folder until I asked them to. ... network was working for that one week, that I had changed "Everyone's" access ... and I had to reinstall my copy of windows. ...
      (microsoft.public.windowsxp.network_web)
    • Re: Biometrics
      ... Can Microsoft remotely work on a Microsoft Windows 98 Second ... Edition computer via India like Microsoft can work on a Windows XP ... Establishing good security practices (patch when we ... within a network for internal safety reasons and potentially to act as ...
      (microsoft.public.security)
    • Re: the exploit that wasnt
      ... regarding OS X security, and does so well. ... You do NOT measure an OS' security by how many patches there are ... MS Windows ... and certainly Windows Vista fixes a lot of problems. ...
      (comp.sys.mac.advocacy)
    • Re: been hit by hacker, servudaemon installed
      ... security patching on iis 4.0 ... security fixes into the new version. ... >install all service packs and patches from Microsoft, ... >>>Windows, Apache, you name it. ...
      (microsoft.public.inetserver.iis.security)