I've run into circumstances like that before. Long shutdown is not
surprising, that happens as a matter of course after making such changes.

At this point, first thing to do is unsecure your system to get it working,
then resecure. Make sure you don't have any GPO's that could impact the
system, reload the "Setup Security" policy, then from a command prompt type
"secedit /refreshpolicy machine_policy /enforce" to force it to take effect,
and check the application log to ensure it was applied successfully.

Hopefully this will get your system up, after which you can probably
re-apply the hisecweb.inf policy without a problem.

Hope that helps,

Kevan Smith
MCSE, MCP+I, ACT, A+
NT Administrator
Tideworks Technology

-----Original Message-----
From: Daniel Ferguson [mailto:daniel.fergusonwillowmead.org]
Sent: Monday, March 11, 2002 10:33 AM
To: focus-mssecurityfocus.com
Subject: 2k server problem

Hi, ive got a windows 2000 server running iis 5 with sp2 and all the latest
hotfixes.
Ive run lockdown and the hisecweb.inf file on the server to secure it. All
was working fine untill this afternoon.
I needed to rename the computer, and the administrator account. Now being
lazy i did both these things at the same time -and- changed the password for
the admin account, i then rebooted the machine. Now it took a very long time
to shutdown, in the region of a few minutes, and when it came up i had the
services failed to load error. When i logged into the computer to check the
event viewer, i could see the list of events but couldnt see the detail
behind them, and event viewer refused to close saying windows were still
open. The stopped services would not load due to dependancy issues.

I would be very greatful of any tips anyone might have to fix this problem
without having to reinstall the operating system. That'll teach me to cut
corners by doing all my changes at once :)

Thanks, Daniel Ferguson

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]