First we need to remove those policy's, i would just
disable them,
they seemed like a good idea, but they just implemented on
the wrong
machines, so we could eventually fix that with some
restrictions.
Next to revert the policies, you should un-join the domain.
There's
obviously two things that'll happen, it could say that you
can't
contract the domain and therefor can't un-join, or it'll say
you
unjoined by your account wasn't disable and you should tell
an admin
this info. Cross your fingers and hope for option two. If
you get
option 1, you could try to do something like sysprep the
machine, and
force it to join a workgroup.
After you get off the domain, reboot about three times, and
we should
finally be out of the group policies, and hopefully you'll
have your
services start. Once we achieve that you should be ok to
rejoin the
domian.
On Mar 2, 3:46 am, "Reggie" <Antony.Symo... gmail.com> wrote:
> Hi,
>
> I changed 2 Domain GPO policies : -
>
> Replace a process level token
> &
> Adjust memory quotas for a process
>
> Added "Network Services" and "Local
Services" to each of the above.
> This was in an attempt to make Vistas firewall service
start as when
> we joined them to the domain it wouldnt work.
>
> Later on that day we rebooted one of our clusters and
when it came
> back up. Cluster service wouldnt start, volume manager
wouldnt start
> and quite a few other critical services including TCP.
So now our
> windows 2003 server has no network ability.
>
> Gpresult says Logon failed bad username or password.
Off the top of my
> head event viewer says cannot find domain or user this
computer
> belongs too...its a long walk back to my computer room
but if this is
> not enough specific information i will go and write
them all down and
> enter them.
>
> Basiclly its cut the server off from the rest of the
domain. I was
> hoping should I take those two entries out of those 2
domain policiy
> entries it would reverse the effect but as the server
cannot talk to
> the network it cant get the new policies!
>
> Also to reverse these policies should I click on teh
"Definethese
> policy settings" but have nothing in them or
should I jsut leave that
> unticked and try and find a way to pass these back to
the server? Or
> does anyone know what I have done here, cus im
bamboozled(seplling?)
>
> Unfortunately this is our main SQL cluster and I fear
that if I take
> any other servers down the same will happen as it
stands all the
> others are ok at the moment...but I am scared :s
>
> Thanks in advance
>
> Antony
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the
Google Groups "Windows 2003" group.
To post to this group, send email to Windows2003googlegroups.com
To unsubscribe from this group, send email to
Windows2003-unsubscribegooglegroups.com
For more options, visit this group at http
://groups.google.com/group/Windows2003?hl=en
-~----------~----~----~----~------~----~------~--~---
|
