Re: Policy change kills access to template
From: Steven L Umbach (n9rou_at_comcast.net)
Date: 10/13/03
- Next message: Mike Burgess: "Re: netstat command"
- Previous message: Steven L Umbach: "Re: Windows ME Media Scripts DL Tampered With"
- In reply to: Peter J. Persing: "Re: Policy change kills access to template"
- Next in thread: Peter J. Persing: "Re: Policy change kills access to template"
- Reply: Peter J. Persing: "Re: Policy change kills access to template"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 13 Oct 2003 19:38:21 GMT
Hi Peter. Thanks for posting back. Glad you got it working and kudos to you
for having the image to restore from. Kind of scary though. --- Steve
"Peter J. Persing" <peter@persing.org> wrote in message
news:bmeclq020q1@enews1.newsguy.com...
> Thanks Steve,
>
> I have checked all those things and they are not the answer. I have run
> netdiag, dcdiag, and lots of other tests on the domain controller and they
> all show everything is ok. The real interesting thing is that everything
> works properly unless I change one of the policies. That rules out a lot
of
> possible problems. Incidentally, the way I get out of this situation is by
> restoring the system from a disk image. Had I not taken an image of the
> system prior to making these changes I would be in a lot of trouble. I
think
> my only hope here is to find out what Error code = -536870656 means. A
> search of the Windows and .net magazine forums shows that one other person
> has this problem, but they don't know what the code means either. I found
> nothing in my Technet CD or on the Microsoft sites. I can just let it run
> this way until Microsoft comes out with SP1 and see if somehow it
magically
> gets fixed, but I would sure like to know what is causing this.
>
>
> "Steven L Umbach" <n9rou@comcast.net> wrote in message
> news:C1kib.743906$YN5.683946@sccrnsc01...
> > Hi Peter. Here is the link to a couple KB articles that may help. I
would
> also run
> > netdiag dcdiag on that domain controller looking for any failed tests
that
> may help
> > pinpoint problem. --- Steve
> >
> > http://support.microsoft.com/?kbid=258296
> > http://support.microsoft.com/?kbid=271213
> >
> > "Peter J. Persing" <peter@persing.org> wrote in message
> > news:bmcbr50pro@enews1.newsguy.com...
> > > On a Windows 2003 domain controller, if I go into either Domain
Security
> > > Policy or Domain Controller Security Policy, local policies, and make
> ANY
> > > changes in Audit Policies, User Rights Assignment or Security Options
> the
> > > changes appear to complete successfully. But if I close the snap-in,
and
> > > reopen it I get a message "Windows cannot open the template file". In
> the
> > > event log I get Event 1001 from SecCli that says "Security policy
cannot
> be
> > > propagated. Cannot access the template. Error code = -536870656". The
> error
> > > message then gives the path to the relevant GptTmpl.inf file, which I
> can
> > > access just fine. It does not appear to be corrupt, and in fact before
> > > making any changes, all existing security policies are applied just
> fine.
> > >
> > > When I say ANY changes can cause this, I mean something as minor as
> removing
> > > or adding an audit policy.
> > >
> > > Anyone run into this before?
> > >
> > >
> >
> >
>
>
- Next message: Mike Burgess: "Re: netstat command"
- Previous message: Steven L Umbach: "Re: Windows ME Media Scripts DL Tampered With"
- In reply to: Peter J. Persing: "Re: Policy change kills access to template"
- Next in thread: Peter J. Persing: "Re: Policy change kills access to template"
- Reply: Peter J. Persing: "Re: Policy change kills access to template"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
