Re: Error convert applying security template

From: Resonate (resonate_at_jolt.co.uk)
Date: 08/13/04 

Date: Thu, 12 Aug 2004 22:03:34 GMT

Stephen

All this occored when i screwed around with the C: file permissions to try
and lock down security. It seems I have screwed the SYSVOL security etc and
I belive this template replaces the file permissions. As I couldnt do it I
decided to try and demote the DC and re add it to the domain but it wont
even let me do that.

I am not getting all them errors in that KB only these

Event Type: Error
Event Source: NTDS General
Event Category: Global Catalog
Event ID: 1126
User: Everyone
Description: Unable to establish connection with global catalog.

Event Type: Warning
Event Source: NTDS General
Event Category: Global Catalog
Event ID: 1655
Description: The attempt to communicate with global catalog
\\computername.SoftwareManager.TheSoftwareManager.com failed with the
following status:

Access is denied.

The operation in progress might be unable to continue. The directory service
will use the locator to try to find an available global catalog server for
the next operation that requires one.

The record data is the status code.
Data: 0000: 05 00 00 00

Any further help appreciated.

"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:wQQSc.275646$JR4.24015@attbi_s54...
> The error message indicates there is a problem reading the file security
> section of
> the security template. You might try to replace it from the install disk
> and also try
> to apply it using the Security Configuration and Analysis mmc snapin tool.
> I read
> that KB and it seems like you might have some major problem with
> replication if all
> that was going on. If you still have problems with replication I suggest
> you post in
> the win2000.active_directory newsgroup for help on resolving your issue.
> Replmon,
> gpotool, repadmin, nltest, dnslint, netdiag, and dcdiag are support tools
> that you
> may find helpful. --- Steve
>
> "Resonate" <resonate@jolt.co.uk> wrote in message
> news:nbRSc.667$oP2.339@newsfe5-gui.ntli.net...
>>
>>
>>
>> Following the advice of KB Q305837. I tried to apply the
>> security template as follows.
>>
>>
>> secedit /configure /cfg basicdc.inf /db basicdc.sdb /log
>> basicdc.log /verbose
>>
>>
>> The reply was:
>>
>>
>> The data is invalid, the task completed with error. See
>> log file.
>>
>>
>> The log stated:
>>
>>
>> Error 13: The data is invalid.
>> Error convert %DSDIT%.
>> Error 13: The data is invalid.
>> Error convertting section File Security.
>> ----Configuration engine is initialized with error.----
>>
>>
>>
>> ----Un-initialize configuration engine...
>>
>>
>>
>>
>> Can anyone help please! My DC's are not replicating :(
>>
>>
>
>

Relevant Pages

  • Error convert applying security template
    ... security template as follows. ... The data is invalid, ... Unable to establish connection with global catalog. ...
    (microsoft.public.win2000.active_directory)
  • RE: [Full-Disclosure] Top 15 Reasons Why Admins Use Security Scan ners
    ... printout of the file permissions of every file on every system. ... They insisted on a printout. ... Top 15 Reasons Why Admins Use Security ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
    (Full-Disclosure)
  • Re: wild and crazy selinux dependencies?
    ... and all of the security types in the universe believe that just one more ... I fail to see where selinux interferes with the possibility to get things done ... if you want to do something that is not compatible with file permissions ... I modify selinux to allow me access to what ...
    (Fedora)
  • REVIEW: "Network Security Jumpstart", Matthew Strebe
    ... %T "Network Security Jumpstart" ... home user to the network administrator to the CEO. ... There is some correct and useful information about viruses in chapter ... more usefully--but they only relate to file permissions. ...
    (comp.security.misc)
  • REVIEW: "Network Security Jumpstart", Matthew Strebe
    ... %T "Network Security Jumpstart" ... home user to the network administrator to the CEO. ... There is some correct and useful information about viruses in chapter ... more usefully--but they only relate to file permissions. ...
    (alt.computer.security)