Re: Backing up the Intranet
From: Jeff Middleton [SBS-MVP] (jeff_at_cfisolutions.com)
Date: 08/12/04
- Next message: Gregory L. Winn: "RE: SBS2000 upgrade & Transition Packs"
- Previous message: RBC: "Cost question"
- In reply to: geoff scholes: "Re: Backing up the Intranet"
- Next in thread: geoff scholes: "Re: Backing up the Intranet"
- Reply: geoff scholes: "Re: Backing up the Intranet"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 11 Aug 2004 21:51:30 -0500
One method of global recovery is a System State restore in DSRM. I'm putting
this on the table to bracket the discussion. If you roll the System State
back to a pre-change condition, the condition change never happened. There
are ways to finesse that further by rolling back and rolling forward again
after doing some preparation work.
So, let's get that cleared up here. Do you have a System State backup of
this server that precedes the change you made?
Another option is to gain System level control and give yourself back
access.
The questions that Ray and I are asking are in some since timid because he
and I both (I know Ray) have the tendency to by pretty thoughtful in how we
would approach a problem...we are going to figure it out.
The other options to gain access involve whacking hard on the top level
permissions to reset things in a way that you give yourself the option to
regain control. It's obviously easier to know which policy we are trying to
overwrite than to just overwrite everything because we can.
However, the idea here is to not break more than necessary to role back the
change you made. Essentially, if you still have Domain Admin rights, but you
have denied your account access to things, it's possible to take back the
rights...that's sort of a baseline in Windows...it's pretty hard to have a
functional server that you can't break into if you have the time and
interest...and a domain admin account. Just a question of figuring out what
to push over.
How To Reset User Rights in the Default Domain Group Policy in Windows
Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;324800&Product=winsvr2003
"geoff scholes" <anonymous@discussions.microsoft.com> wrote in message
news:484801c47fe8$aeb3dda0$a401280a@phx.gbl...
>
> I originally edited the group policy within the Server
> Management console, as a concequence all the new
> permissions have been applied to the Administrators
> Account as well as domain users. When I open the Server
> Managment console a message box appears saying "The snap-
> in below referanced has been restricted by policy.Comtact
> your administrator ect" The LHS tree of the console
> appears ok but the RHS window displays a stop error "Snap
> in creation failed The user policies prevent MMC from
> creating the snap in" then a CLSID file name. Any attempt
> to manage in the control panel receives permission errors
> also. Apart from this the server is functioning well. I
> need a way to set the domain security policies back to
> the original settings. If you can help me it will save me
> alot of work over the weekend !!!
>
> Geoff
- Next message: Gregory L. Winn: "RE: SBS2000 upgrade & Transition Packs"
- Previous message: RBC: "Cost question"
- In reply to: geoff scholes: "Re: Backing up the Intranet"
- Next in thread: geoff scholes: "Re: Backing up the Intranet"
- Reply: geoff scholes: "Re: Backing up the Intranet"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
