Re: W2K Srv lost admin



You are providing almost no information to go on. My guess (Read that
GUESS) is there is a FW that is blocking the high rpc port connection.

I would recommend you download a port query tool such as PortQryUI to try
and determine if ports are being blocked. Run this tool from both sides of
where the the DC's communicate. There should be a preset query for
replication AD communications.

http://www.microsoft.com/downloads/details.aspx?familyid=8355E537-1EA6-4569-AABB-F248F4BD91D0&displaylang=en

The following link will help you if this is the case:
http://support.microsoft.com/kb/154596/en-us

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.

"T_HAWK" <THAWK@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4099BE2D-831A-4018-8546-91927682ED8F@xxxxxxxxxxxxxxxx
Hello,
Recently I found our default dc gp to be corrupt and i had to run the
gppol??? to get a fresh copy. It appears to have effect 2 servers on the
domain that accept FTP from a Linux box. The FTP passwords would not be
accepted until they were given admin rights.
It also affected about 8 tasks we have in scheduler which would give a
80070569 error about ever 8 hours. Needing someone to go back and enter
the
admin password on one task then the others would restart.
I have checked the system time as I have seen that on posts that sometimes
that may cause a loss of admin issue. I now believe it has to do with the
GP
refresh.
Any help is appreciated. thanks.


.



Relevant Pages

  • Re: Am I hacked? IIS dying, telnet localhost 443 gives: Hallo, Willkommen auf Compactzone Stro!
    ... miscreant has remote access to the box with admin rights. ... I have a server running IIS and I ... When I try to telnet the server using port 443 I get the same ...
    (microsoft.public.inetserver.iis.security)
  • RE: Mysterious "Support" account created on Win2k server
    ... > port 445 worm/virus/Trojans are the ones spread via ... > for guessing admin ids and passwords. ... > account to create another admin account (support in ... While "wimlogon" may look close to legit, ...
    (Incidents)
  • Re: OT: Geekness - avoiding proxies
    ... As an ex-network admin I would spot your ... trying to talk to the outside world on an odd port. ... they are administered and how a good network/security admin does their ... depends what is allowed through the firewall. ...
    (uk.rec.motorcycles)
  • Re: Using a home T-1 line to evade company filtering
    ... The admin would see traffic on an unusual port number. ... It's even more priceless when they fashion themselves to be clever ... Liberals have invented whole college majors - psychology, ...
    (comp.security.firewalls)
  • Re: reader
    ... my admin is as stubern as mud ... and pastions (yeah i know i cant ... >be willing to make a firewall rule that would open port ...
    (microsoft.public.cert.exam.mcse)