Re: Nasty Unknown Problem

From: Alan van der Vyver (alanv_at_worldnet.att.net)
Date: 09/13/05 

Date: Mon, 12 Sep 2005 19:47:59 -0400

>
> I am glad to know it was not viral in nature and that in itself is a good thing ;-)
>

Not only was it not viral in nature, but it was entirely due to my own
ineptness. The problem was found after a long session with a very
helpful chap at Microsoft support.

While trying to set up Kerberos delegation I had activated the
"Impersonate a client after authentication" group policy user right and
added an account to it without realizing that if it is activated, the
Administrator and Service accounts also need to be added.

As this policy was being propagated to machines in the domain it was
causing all sorts of services on them to fail and resulting in the
strange range of symptoms, which looked suspiciously like sophisticated
malware.

regards,
Alan.

Quantcast