Re: After installing SP1 network connections folder is empty



Thanks. This worked.

"Jabez Gan [MVP]" wrote:

A copy and paste from a solution posted by another user, titled "Server 2003
issues after SP1 with a 2000 DC"

-----------
Hi List,

This is the answer to a problem not a question.

It took me a day to work this out after some intense googling and
searching of Microsoft KB. So I decided for the benefit of everyone I
would share my knowledge.

The scenario is:

Windows 2000 SBS domain controller
Windows 2003 Member Server

Apply SP1 to 2003 server, networking dies, unable to connect to domain,
Event ID 10016 DCOM / COM+ objects failing to start.

In simple terms, SP1 changes the way some of the security is handled
around loading these COM objects. This is "Impersonate a client".

If you 2003 server is already on, or you join a 2000 domain it will
recieve a 2000 domain group policy. The "Impersonate a client" rights
set in this policy are not sufficient to allow the 2003 server COM
objects to start.

To fix the problem, you will need to uninstall SP1 or remove the 2003
member server from the domain and reboot.

Your networking etc should be returned to normal.

Edit the default domain policy on the DC (access to this through
Administrative Tools / Active Directory users and computers).

Drill down to:

Computer configuration / Windows Settings / Local Policies / User
Rights Assignments / Impersonate a client after authentication

Add the following : Service IIS_WPG ASPNET Administrators and
Administrator

When done you can close the policy editor.

On your 2003 member server you can now rejoin the domain, or reapply
SP1. It will take a couple of reboots before you have the policy and
it is installed.

Apparently MS are aware of this little feature be don't publicly share
it.

As I say, it took me a day of scouring the net to work this out, if I
used some of your ideas or posts thank you!

I hope this is helpful to you.

Chris
-----------

Hope this helps.



--
Jabez Gan [MVP]
Microsoft MVP: Windows Server
http://www.blizhosting.com
MSBLOG: http://msblog.resdev.net


"Pedram" <Pedram@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9661DA86-D993-4094-BB22-D86FB63F5EFD@xxxxxxxxxxxxxxxx
I have a bunch of windows 2003 servers that need to be upgraded to SP1. But
after the upgrade the network connections service cannot start.
After the installation of the SP1 when the server reboots, COM+ Event
System
service gets stuck in starting mode and cannot completely start. Network
Connections service also cannot start and as a result in the network
connections page there is not connections visible.
I have looked at the Article ID 909444 from the knowledge base and applied
the solution that is provided in there but still the problem is not
resolved.






.



Relevant Pages

  • Re: what does banned from irc mean
    ... - Systems Design for providing this server! ... - Welcome to Freenode, a service of Peer-Directed Projects Center. ... - our policy page. ... - the network indicates your acceptance of this policy. ...
    (Debian-User)
  • RE: Printing from Win9x clients stops
    ... but you received a message "slow network transfers" now. ... If the windows 9x clients cannot use the SBS Server shared printer yet, ... Right-click Default Domain Controllers Policy and select Edit. ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows 2003 SP1 Network issues?
    ... One of the server is originiall ... I am uninstalling SP1 from that server. ... How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com ...
    (microsoft.public.windows.server.networking)
  • Re: Win2003SP1 DC loses all shares, roaming profiles cannot logon or logoff
    ... If so check youir DNS server settings from your network card, that it points to the right DNS IP address. ... Windows 2003 Standard Domain Controller and a bunch of Windows XP SP2 ... Information item that tells me "Security policy in the Group ...
    (microsoft.public.windows.server.networking)
  • Re: Forcing Proxy Settings
    ... You should take a read in the ISA help for "WPAD". ... I have an ISA server running the web proxy service only. ... domain to use this server for internet access while on the network. ... I had to lock the connections tab in the policy. ...
    (microsoft.public.isa.clients)

Loading