Re: What happens if you scan the sysvol and netlogon?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Ken Nichols (anonymous_at_discussions.microsoft.com)
Date: 07/06/04 

Date: Tue, 6 Jul 2004 11:04:46 -0700

New folders that were created only have numbers for the
folder names 448dc3c4be1fc7ba7fa523be8ba509c. Should I
be able to delete these folders? They appeared to be
created at the time the scan was happening.

The item of most concern is the eventview item userenv
which says windows cannot obtain the domain controller
name for your network. This is on the domain
controller. This only happened twice and the scan was
stopped. I don't believe Microsoft would corrupt an
entire active directory on a simple mistake. I have not
restarted the server since and no other errors have been
logged.

Any thoughts?

Ken

>-----Original Message-----
>SYSVOL should only be scanned with trusted anti-virus
software. Symantec is
>okay so far I know. How ever what files or folders are
created. SYSVOL are
>used to store Group Policies for example. The content
will be modify by
>Active Directory behavior and group policy creation and
removal within the
>domain, that's common.
>
>--
>Regards
>Christoffer Andersson
>Microsoft MVP - Directory Services
>
>No email replies please - reply in the newsgroup
>------------------------------------------------
>http://www.chrisse.se - Active Directory Tips
>
>"Ken Nichols" <anonymous@discussions.microsoft.com>
skrev i meddelandet
>news:26ba101c4636c$47b72820$a601280a@phx.gbl...
>> We had a worm come through. I had symantec scan drives
>> and it scanned the sysvol and netlogon. I received 2
>> items in the eventviewer Event ID: 1000 userenv. Now
>> there are a couple of new folders in a share that is on
>> that same drive that I did not create.
>>
>> What is going on?
>>
>> Ken
>
>
>.
>

Relevant Pages

  • Re: Access Denied on GPMC
    ... security on folders and subfolders under sysvol are all assigned to domain ... on the active directory, it still says access denied, i checked on the active ... > Domain Admins FC, especially the \Sysvol share. ...
    (microsoft.public.windows.server.general)
  • Re: What happens if you scan the sysvol and netlogon?
    ... SYSVOL should only be scanned with trusted anti-virus software. ... How ever what files or folders are created. ... Active Directory behavior and group policy creation and removal within the ... I had symantec scan drives ...
    (microsoft.public.win2000.active_directory)
  • Re: Accessing User and Profile Directory
    ... > I inadvertently erased a user from Active Directory and after I added the ... I could not access the Users and Profiles Directory. ... > permissions and sharing to those folders has not worked either. ... If You want to set permission to access this files by other user when ...
    (microsoft.public.windows.server.active_directory)
  • Re: Expanding on KB 244600?
    ... I have asked for this on multiple ... occasions and always get the cold shoulder. ... Active Directory attributes, etc. ... folders for member servers and domain controllers for Windows 2000. ...
    (microsoft.public.win2000.security)
  • Re: HELP - MSExchangeIS, Event ID 9543 Error
    ... an object in Active Directory for that folder.Usually this message indicates ... > Reboot of the exchange servers corrected the situation without any further ... Your problem seems deeper as it is related to preexisting folders. ... > Maybe you should check first that Exchange servers can access Global ...
    (microsoft.public.exchange.admin)