Everyone group removal Caused HUGE problems

[avc]

The everyone group on the forest root domain controller
was inadvertently removed from the root of C during a
fresh AD 2000 forest Exchange 2003 installation.

then a DC promo was run on a second machine and it seemed
to run successfully. however the second DC cannot see the
Domain. Therefore, I tried to demote the second DC and it
will not see the Forest Root Domain Controller. I am
trying to avoid a complete reinstall.

Is there anyway to get this domain back into working order
without forcibly removing the second domain controller and
reformatting.

I believe it is related to the SYSVOL and the everyone
group removal. I put the everyone group back on the
sysvol with full control and tried again but it did not
work.

Is there a Microsoft support group that I can pay to help
as it is going to cost me a small fortune in hours to
rebuild anyhow.

 

[Lanwench [MVP - Exchange]]

Ugh. Smack whoemever did that and take away their admin rights!

Maybe this will help?

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q244600&ID=KB;EN-US;Q244600

Note that you might want to call PSS and pay for help - flat rate of $245
(for the US, anyway). May be worth it.

 

[Yor Suiris]

If you have a system state backup of a DC before the inadvertent removal of
the group try a restore.

 

[Resonate]

presumably your getting these errors now

I have the same problem and gonna have to travel to our datacentre to
reinstall as ive exhausted all possibilities.

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q305837&ID=KB;EN-US;Q305837

CAUSE
This behavior can occur if you lock the system partition and remove the
Everyone group from various locations.

The fix failed at the last step for me but maybe it will work for you.