Windows 2000 Server

[Raz316]

Friday, someone came in to install some clocking in software on our server, to cut a long story short, it all went a bit pear shaped and now we get the following errors every 5 minutes...

Event 1000
source Userenv
user NT Authority/System

Windows cannot access the registry information at \\woop.co.uk\sysvol\woop.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (1240).


Event 1001
source SceCli



Security policy cannot be propagated. Cannot access the template. Error code = 3.
\\woop.co.uk\sysvol\woop.co.uk\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.


Event 1000
source Userenv
user NT Authority/System

The Group Policy client-side extension Security was passed flags (17) and returned a failure status code of (3).

Also user Administrator cannot access any network shares at all. It can host them, but cannot see any, even its own (hence the sysvol error). We have tried pretty much everything google has to offer, including everything on the microsoft support site, but it just isnt happening.

Any ideas?

Thanks

[Paul Adams]

You might want to cut your losses now and place a support call with Microsoft - if you try a number of things to attempt to "fix" the problem, you might make it worse.

(Without knowing the details of what software it was, what it did with the schema and policies, what "remedial" action was taken afterwards, etc. it's very tricky to try to diagnose.)

I'm not going to claim I can help fix it, I simply don't know enough about Windows 2000 and AD, but have you taken a glance at this page which has a whole raft of users who had this problem, and how they individually resolved it?
http://www.eventid.net/display.asp?e...serenv&phase=1

Good luck (and slap the guy who trashed your network if he didn't image the servers before starting).

[Moby-Dick]

I was going to mention eventid.net - its my first port of call for eventlog messages.

[Jiff Lemon]

Friday, someone came in to install some clocking in software on our server, to cut a long story short, it all went a bit pear shaped and now we get the following errors every 5 minutes...

Now there's where I'd be starting.....

Get 'em back in and get them sorting. They've cocked it up, they're responsible for fixing. If support call has to go to MS, they should be sent the bill.

[Raz316]

ta peeps, currently going through the page paul suggested.

[Butuz]

Can you not restore the System State from a previous tape backup (one that was taken before the numpties came in and wrecked your server)?

Butuz

[Stoo]

"Some contributors recommended the use of the OH.EXE utility from the Windows 2000 resource kit to identify the application that locked the registry."

Worth a try to identify which app killed it?

hmm...

" I had this problem when event id 1000 and 1001 kept popping up every 5 minutes. Enabling the TCPIP Netbios Helper service on my domain controller fixed the problem."

Looks like an identical problem..

[Raz316]

Sorry for the delayed reply, I forgot I posted this here. Thanks to all for the suggestions, we've got everything sorted now (except a few minor problems.. see below), and we are now installing the clocking in software on its own machine

Ok the problem now is, on our data drive lots of files have lost their ownership which means they cannot be accessed by anyone unless you go in, and apply new ownership details for each individual file. Anyone know if it is possible to do some sort of bulk ownership assignment?

Again, much appreciated everyone

[Paul Adams]

Ok the problem now is, on our data drive lots of files have lost their ownership which means they cannot be accessed by anyone unless you go in, and apply new ownership details for each individual file. Anyone know if it is possible to do some sort of bulk ownership assignment?

Glad to hear you got the problem sorted

This bulk ownership - is it all files need to be owned by one account?
If so, select them all, right click - Permissions - Security tab - Advanced, then you can set the owner for all of them in one go.

If the files are similarly named but in different locations, use a Search and highlight the files in the results window and do the same as above.

That should sort it.

If it's individual users for individual files then I'm afraid I have no idea how you'd manage that apart from doing it manually, sorry.

[Raz316]

ta paul, yeah the files just need an owner, it doesnt matter who, we tried selecting them all but it just changed the filed that was actually right clicked.

Anyways, this has been sorted now, Im not sure how yet but the other IT bloke did it Ill find out and edit this post

thanks again!

[Paul Adams]

Strange, just tested it here on a W2K Advanced Server (SP4) with a couple of files I created and it worked perfectly.
*shrug*

Maybe they really did goose that server