Windows Server 2003
1835670 Members
2831 Online
110082 Solutions
New Discussion

restore SystemStateBackup on DC but Domain Ctrler Security Policy is disable

 
SOLVED
Go to solution
Maaz
Valued Contributor

restore SystemStateBackup on DC but Domain Ctrler Security Policy is disable

After taking System State Backup, I mistakingly/unintantionally uninstall ADS.
I simply restore the System State Backup, and all settings are back ;), now i can run Active Users and Computer tool/console by typing %systemroot%\system32\dssite.msc, and also Active Directory Sites and Services by typing %systemroot%\system32\dssite.msc, but when
type to run(%systemroot%\system32\dcppol.msc) the Domain Controller Security Policy, following Error page occured:

Failed to open the Group Policy Object. You may not have appropriate rights.

Details
The Specified domain either does not exist or could not be contacted


and when I click on the Close button on the error page, Domain Controller Security Console opens... with Disablity or (X)Group Policy Obeject Editor

same is with the Domain Security Policy, i.e. same error page ocured when i try to run/type %systemroot%\system32\dompol.msc

just these two things i.e. Domain Controller Security Policy, and Domain Security Policy is not working/disable.
WHY ?


Ok, One more thing to say... none of the ADS tools are shown/include in the start->Admin Tools. And if I execute Local Security Policy, i found that all of the Account Policies(Password Policies, Account Lockout Policy, Kerberos Policy), Audit Policy and User Right Assignment are disable, i.e. eg if click on Enforce Password Age, i cant make any changes.

Plz help me
Thanking in Anticipation
Regards
Maaz
6 REPLIES 6
Norman_21
Honored Contributor
Solution

Re: restore SystemStateBackup on DC but Domain Ctrler Security Policy is disable

Maaz,

This MSKB may help:
http://support.microsoft.com/default.aspx?scid=kb;en-us;832214

Replace the domain name 'example' with your domainname:

DC=yourdomainname,DC=com"

Also, did you run the ntdsutil after restoring the system state?

"Attitudes are contagious, is yours worth catching"/ My first point was given by SEP on January 31, 2003
Norman_21
Honored Contributor

Re: restore SystemStateBackup on DC but Domain Ctrler Security Policy is disable

Also, did you check the FSMO rules are up and running?
Install the resource kits and run the following command:

netdom query FSMO

Post the results here.

Here is another MSKB Article if the first one didn't help:
http://support.microsoft.com/default.aspx?scid=kb;en-us;294257


"Attitudes are contagious, is yours worth catching"/ My first point was given by SEP on January 31, 2003
Maaz
Valued Contributor

Re: restore SystemStateBackup on DC but Domain Ctrler Security Policy is disable

Dear LATIF once again Thanks for the help and support... I m highly thankful to u.

folowing MSKB worked for me
http://support.microsoft.com/default.aspx?scid=kb;en-us;832214


Also, did you run the ntdsutil after restoring the system state?

Ans=NO


Also, did you check the FSMO rules are up and running?

ANS=yes, all FSMO roles are up and running.

Thanks
Regards
Maaz
Norman_21
Honored Contributor

Re: restore SystemStateBackup on DC but Domain Ctrler Security Policy is disable

Cool Maaz,

You seem to have a good handle of the problems!!!
What happened with the encrypted files & folders issue? Did you decrypt them?





"Attitudes are contagious, is yours worth catching"/ My first point was given by SEP on January 31, 2003
Maaz
Valued Contributor

Re: restore SystemStateBackup on DC but Domain Ctrler Security Policy is disable

Thanks Dear LATIF for help and Appreciation ;)

No, Dear I didnt check the issue(decryption) yet, bcause i m still busy doing some other important tasks.
Hope I'll check this(decryption) issue within 2, 3 days.

Regards
Maaz
Norman_21
Honored Contributor

Re: restore SystemStateBackup on DC but Domain Ctrler Security Policy is disable

Please keep us updated.
Do not forget to create an ASR backup for your Server 2003 for a quick recovery!
"Attitudes are contagious, is yours worth catching"/ My first point was given by SEP on January 31, 2003