Win2K Server problem
 

TP can probably help on this one.....

Got a Win2K server/Exchange 5.5 on a secure LAN, I log in with both the local admin account and domain admin account (NT domain no AD) but cannot change various things, examples are time and date, and more importantly I am trying to install Dell Array Manager, but I get access denied, not enough priviledges.

Any ideas?

What is in the system log? Application log?

Can the server see the WINS/DNS servers? Can the server resolve the local BDC?

What the hell are you doing still running an NT 4.0 domain? Need some AD design consultancy? :P

Nothing in the logs and PDC/BDC WINS and DNS are all OK, that wouldn't explain the local admin account though

AD design and consultancy..... that's what EDS are in for, 18 months and counting :D

If you are logged in with the local admin account there isn't much that will explain not being able to install a poece of software. It's a lot easier if you know the history of the server ... do you have any nt policies that would have been applied to change the default permissions? With NT 4.0 policies the changes are still in effect after the policy has been removed - unlike Win2k policies.

I would turn on all the security audting (for failures) you can and try installing it again - then review the security log for failures.

You've got absolutely no errors or even warning events in the system/application logs?

18 months!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! are you serious??

Bloody hell!!!

Have you checked file system permissions etc???

18 months .... OMG

Will have a look, basically the IS has hit something like 67Gb, and there's little disk space left, so we have had an external array installed to do an off-line defrag (as there's 30+GB of free space in the DB) but cannot get array manager to install, not enough priviledges.

As for 18 months, bit harsh, they've rolled out a few desktops

A few eh ... thats 18 mths worth of consultancy well spent then .... How big is the customer you working at? Number of desktops/users? u2u me if you don't want this public knowledge ..

Has this box been blue screening due to running out of space? Where is the pagefile stored (what drive) and how big is it? How much space left on the c:?

The contract in place is for 44,000 users, about 2/3rds of the staff, sooner or later (hopefully later) what I do will be migrated over and the support moved down south, so I'll be out of the door, but who knows when that will be.... there's no back end in place yet.

As for the box, no, no blue screens, there's plenty of disk space on other containers, just the drive with the IS is low, and as the size is large it won't back up as we need to change tapes half way through.

Just need to figure out whats wrong with the admin account etc to allow me to do anything than just log in and administer the exchange app

Plenty of things to keep trying ... try creating a new admin account with the old one and make sure you go into the filesystem on at least the c: (assuming you are storing the program files in the default location) and cascade the permissions down the filesystem. Using regedit make sure the account has permissions to write to the registry etc ... if you try all these and are still stuck let me know.

44,000 eh ... so not a small customer. So is a move to Titanium being designed at the same time as an AD forest being implemented? Plus new desktop strategy, software distribution, monitoring, policy management? Plenty to do there. Sounds like some good work at least. My contract is up on Dec 31 but I've taken leave from the 15th so only 2.5 weeks of work left for me and no other contract signed or even sighted yet. I am definitely going to enjoy 25 of days in Spain though!!!! :D

Anyone want to give me a job? I make good coffee :D

I'd say they'll be after people down in London as we speak unless the jobs have all gone, moving from Bank to Canary Wharf etc, failing that Poole.

Just been speaking to someone about this issue, the builds are so tied down, could well be a policy which has been applied, need to do some digging.

Well I'm updating my CV today and haven't really sent it around for 2 years (yes I've been at BP for that long!). To be honest I'm a bit more focussed on having a break than finding another contract. Although it has the potential to scupper all bike plans for next year.

Now, the server. To be honest it could be lots of things, but highly likely to be security/permissions related. Keep digging and let me know - have you got my phone number? If not I'll u2u it to you.

Weeksy has a point about the Exchange service account. The only thing about that is if your customer manages it's security and admin model anything like BP then you won't get the password for it. Worth a look though.

Dude - it's a win2k server. I've never tried to run usrmgr.exe on a win2k server so I just did and it didn't work. Those User Rights are controlled through the Group Policy mmc snap-in now.

:)

I know the Exchange service account password, I installed the exchange side, and that's got loval admins also, but it does look like it's more of a group policy problem...

Dig dig....

Here's my thoughts on consultants :lol::lol:


Murray Mint

hmmphhhh

I'll have you know that we are not all that bad!!












I admit most are, but not all of us :frog::smug:

Only kidding Lily, just that in my experience it's sooooo true. Now if only i could get me some of that stuff.

Murray Mint

I wouldn't say we really prolong the problem, just if we can't find a way to fix it that gets a good rate of return for us, we just assist them in discovering problems they didn't know they had that are more profitable for us to solve :D

simple :bouncy:

:(

Hay TP, please don't take it personally, im sure you one of the nice guys.

Murray Mint

Of course I am :D

;) :o :devil: :frog: :ninja:

TP....

Problem sorted me thinks, had a look on DELL's website and there a good article about Win2k and pretty much what I was experiencing, seems a few changes I've made to the policies have opened up quite a bit more functionality, typical restricted builds, touch wood all will be sorted tomorrow (famous last words!)

Good luck mate. Just let me know if you need my help. I've u2u'd you my number.