Re: Error 1030/1058 in EventViewer + "Access is Denied" trying to edit GPO's

Hello Ryan,

Thank you for posting back!

First of all, I strongly suggest you that read the following KB article and
strictly follow the steps:

You cannot open file shares or Group Policy snap-ins when you disable SMB
signing for the Workstation or Server service on a domain controller
http://support.microsoft.com/?id=839499

If you exported Group Policy before, please see the following KB article:

833319 "Access Denied" error message after you restore GPOs from a CD-R
backup
http://support.microsoft.com/?id=833319

If the issue persists, please collect the following information:

Ryan, please understand, the information I required in my previous reply is
very important to isolate the issue, we cannot do any research for you
without this information. I am greatly appreciated your co-operation to
gather the information I require:

1. How did you edit GPO and got "Access Denied" error message? Please see
step a) in my first reply.

2. In your first post, you mentioned "This server is bone fresh", "I've
never EVER EVER modified a GPO or anything, and I cannot!", but in your
last reply, you mentioned "I did edit the GPO's per another issue I was
having". Ryan, I need to know what happened. Please fully describe "I did
edit the GPO's per another issue I was having", what GPO did you edit?

3. You mentioned "I turned off SBS signing by using the policy editor".
What is "SBS signing" and "policy editor"? Please fully give out the steps
how you did so.

4. On the server, run "eventvwr" (without quotation marks), double click
each of the error events, click the Copy button and paste the full content
to the Newsgroup.

5. Gather Filemon log. Please refer to step c) in my first reply.

I am appreciated your time and co-operation, and looking forward to hearing
from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>From: "Ryan" <mindflux98@xxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Error 1030/1058 in EventViewer + "Access is Denied" trying to
edit GPO's
>Date: 24 Aug 2005 14:33:17 -0700
>Organization: http://groups.google.com
>Lines: 3
>Message-ID: <1124919197.736108.44080@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <1124834120.814978.103310@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <gPuMslHqFHA.1204@xxxxxxxxxxxxxxxxxxxxx>
> <1124892217.663906.14890@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <1124912451.665098.60700@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
> <1124918313.013167.281680@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>NNTP-Posting-Host: 209.194.188.82
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>X-Trace: posting.google.com 1124919202 2115 127.0.0.1 (24 Aug 2005
21:33:22 GMT)
>X-Complaints-To: groups-abuse@xxxxxxxxxx
>NNTP-Posting-Date: Wed, 24 Aug 2005 21:33:22 +0000 (UTC)
>In-Reply-To: <1124918313.013167.281680@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
>User-Agent: G2/0.2
>Complaints-To: groups-abuse@xxxxxxxxxx
>Injection-Info: g43g2000cwa.googlegroups.com; posting-host=209.194.188.82;
> posting-account=7S8eXQ0AAADgx3x7OsjgGdZLfwtguyM5
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!g43g2000cwa.googlegroups.com!not-fo
r-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147512
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Mkay, those two keys in the post above reset themselves to 1 as I was
>editing policies, which then locked me out! What's going on here?!
>
>

.