Can't connect to master schema

[Ed]

This morning, in an attempt to get Oracle to use Active
Directory, we managed to lock ourselves out of Active
Directory via any snap-in tools. Error messages as
follows:
1) Domains and Trusts: The configuration information
describing this enterprise is not available. Unspecified
error.
2) Schema: Could not connect to the current schema master
server.
3) Sites and services: Unable to connect to the domain
controller because: Unspecified error
4) Users and computers: Windows cannot connect to the new
domain because: Unspecified error.
I've searched the knowledge base and newsgroups, but have
yet to find any solution to get back in. Is there another
way to add or restore permissions, schema, etc?
Thanks

 

[David Brandt [MSFT]]

Several things that you might try here from editing the gpttmpl.inf file to
resetting the security settings. Could not find anything on those errors
with the "unspecified error" although the rest of the error msg we do see,
but it is normally along with logon denied etc commonly after a box had been
infected. I think the following should help out.
329887 You Cannot Interact with Active Directory MMC Snap-Ins
http://support.microsoft.com/?id=329887

267553 How to Reset User Rights in the Default Domain Controllers Group
Policy
http://support.microsoft.com/?id=267553

226243 HOW TO: Reset User Rights in the Default Domain Group Policy
http://support.microsoft.com/?id=226243

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Ed]

-----Original Message-----
Several things that you might try here from editing the gpttmpl.inf file to
resetting the security settings. Could not find anything on those errors
with the "unspecified error" although the rest of the error msg we do see,
but it is normally along with logon denied etc commonly after a box had been
infected. I think the following should help out.
329887 You Cannot Interact with Active Directory MMC Snap- Ins
http://support.microsoft.com/?id=329887

267553 How to Reset User Rights in the Default Domain Controllers Group
Policy
http://support.microsoft.com/?id=267553

226243 HOW TO: Reset User Rights in the Default Domain Group Policy
http://support.microsoft.com/?id=226243

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



.
David,

We had previously looked at 329887 and 226243, but
overlooked 267553, so that seemed promising. However, it
appears to have made no difference after applying.
We restored the default configuration as the article
suggested, and also tried a GptTmpl.inf restored from a
backup prior to the problems.
We have 2 domain controllers, and the replication of
the .inf and version change seemed to go fine.
It seems as though AD is still functioning O.K., but just
as read-only - locking us out from any changes.
I'm open to any other suggestions, as we can't operate in
this state for much longer.
Thanks