Re: 2003 server hangs at Applying Computer Settings - Can't login

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 10/09/04


Date: Sat, 9 Oct 2004 02:39:18 -0700


> It looks like the server still has the administrator and
> other system accounts still loaded in memory, and
> therefore Exchange and other services are unable to start.

Or maybe the server was configured to auto-login the administrator -- and
since the screensaver defaults to locking, it could explain why you keep
seeing the system locked by the administrator, even across reboots.

Regarding 0x80090006 returned by IIS -- the times I've seen that error, it
has always been catestrophic and requires reinstalling IIS. What happens is
that IIS is not able to use the machine's crypto key to decrypt parts of the
IIS configuration file, rendering it unable to start.

For example, one way to get into this state is if you install IIS, back up
the metabase.xml (IIS configuration file), then run DCPROMO -- a process
which eventually changes the machine's crypto key -- and then you later
restore the old metabase.xml for whatever reason. At this point, the old
file cannot be decrypted with the new key, and IIS returns 0x80090006.
Normally, it is a good idea to keep backup copies of metabase.xml for
restoration purposes... except this instance. You need a new backup after
the DCPROMO.

I don't know if it applies in your situation, but it's something to keep in
mind since you have a DC, IIS6, 0x80090006, and a recent reboot/hang.

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"mwheat" <mwheat28@hotmail.com> wrote in message
news:%23oS%23ncVrEHA.1988@TK2MSFTNGP09.phx.gbl...
I disabled all NAV services and installed the UPHClean service. I'm at least
able to log into the console now.
However, the IIS Admin service won't start. Many services depend on that
service.
Any suggestions would be appreciated.
Here's the error: The IIS Admin Service service terminated with
service-specific error 2148073478 (0x80090006)
Nothing real specific on this error out there.
Thanks
Mark
"mwheat" <mwheat28@hotmail.com> wrote in message
news:#vNUi5UrEHA.348@TK2MSFTNGP15.phx.gbl...
> Thanks for the quick reply Mike.
> Here is what I have learned thus far (now that I'm on site).
> The server apparently had a problem this AM, and the administrator account
> (which it was logged in as) never logged off properly. I can see the
> Administrator account still logged in at the console in TSAdmin, and
> attempts to force the log off process have been unsuccessful. I found an
> error stating  --Windows cannot unload your classes registry file - it is
in
> use by other applications or services. The file will be unloaded when it
is
> no long in use.-- 
> I found a utility UPHClean that is supposed to fix the apparent leak, but
> since I'm unable to access control of the desktop, i'm unable to install
it.
> Enabling the Telnet service to remotely install the app, has proven
> unsuccessful.
> It looks like the server still has the administrator and other system
> accounts still loaded in memory, and therefore Exchange and other services
> are unable to start.
> Rebooting has not helped. After sitting at the "applying settings" screen
> for about 2 hours, I was able to finally see that the system was locked by
> the administrator. When I unlocked it, it showed logging off.
> 2003 must keep profiles loaded accross reboots? Or remembers what it was
> doing last before the problem?
> This is getting bit long winded, but the additional info may help in a
> specific corrective action.
> Thanks for your assistance.
> Mark
>
>
>
>
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:eBvlc9TrEHA.2024@TK2MSFTNGP10.phx.gbl...
> > Hi Mark,
> >
> > Try these steps:
> > * boot into safe mode
> > * disable NAV
> > * make sure that in DNS IP under TCP/IP settings for preferred DNS
server
> is
> > set to 127.0.0.1
> >
> > Make sure you follow there recommendations for antivirus on your domain
> > controller
> >
> > Virus scanning recommendations on a Windows 2000 or on a Windows Server
> 2003
> > domain controller
> >
>
http://support.microsoft.com/default.aspx?scid=kb;en-us;822158&Product=winsvr2003
> >
> > Mike
> >
> > "mark" <mwheat28@hotmail.com> wrote in message
> > news:%23T4NfzTrEHA.2948@TK2MSFTNGP11.phx.gbl...
> > > Greetings,
> > > I have a Windows 2003 server that looks to have locked up last night.
> > > After reboot, it just hangs at the Applying Computer Settings and
won't
> > give
> > > a login. Been sitting for 45 minutes with no progress.
> > > Was able to restart and log onto box in safe mode. Logs show nothing
out
> > of
> > > the ordinary.
> > >
> > > Server is DC, running Exchange 2003, Symantec NAV and Spam filtering.
> > >
> > > Any suggestions would be greatly appreciated.
> > > Mark
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Please help refresh my memory on AD DC
    ... use only domain user accounts. ... "Meinolf Weber" wrote: ... Remote server ... Also that one for IIS. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Problem with connect computer wizard
    ... You mentioned that you're using Anonymous access with Administrator ... Open ConnectComputer properties in IIS. ... And there is only the DNS server be configured on client ...
    (microsoft.public.windows.server.sbs)
  • Re: CGI apps break after DCPROMO an IIS6 server
    ... This is one of those things different on a DC vs a member server in regards ... The "built in" accounts have the minimum and necessary privileges to run ... >privileges listed in F1-help of IIS Manager UI required ...
    (microsoft.public.inetserver.iis.security)
  • Re: password expiration policy for admin and system accounts ?
    ... > scheduled tasks that use various administrative accounts. ... > administrative account which starts several key exchange services. ... > Thus every time the exchange server was rebooted several exchange services ... >> JJ wrote:>>> Our auditors are objecting to our having Domain Administrator and domain>>> system accounts with passwords that never expire. ...
    (microsoft.public.security)
  • Re: password expiration policy for admin and system accounts ?
    ... > scheduled tasks that use various administrative accounts. ... > administrative account which starts several key exchange services. ... > Thus every time the exchange server was rebooted several exchange services ... >> JJ wrote:>>> Our auditors are objecting to our having Domain Administrator and domain>>> system accounts with passwords that never expire. ...
    (microsoft.public.win2000.security)