Must be why he got fired....

[Guest]

Recently I was reffered to a new client. "The system is so messed up", she
said, "He probably had no clue what he was doing...". I knew I was in for
some fun. A domain for a reality company and a construction company the first
problem I noticed was the naming convention for the domain. Some use a proper
DNS name, company.com or company.local or some variation resembling a proper
name. This domain is named Company1.Comany2, pffff! After finding half the
client computers are running windows home, I logged into the domain
controller, prompted with a message screen "Welcome to domain!" after
pressing ctrl+alt+del i thought must be new to group policy. So, I start,
run, gpedit.msc. Big suprise, denied, local policy contact your
administrator. After being denied on a few other msc's (ras, iis, dns,
exchange sys mngr, mmc.exe) i realize this could be a problem. So I learned
of a way to reset group policy settings in the registry once upon a time and
start, run, regedit.exe... SUPRISE this is blocked too. So here I am, five
hairs left to pull out before I call microsoft for $240, and I turn to the
microsoft forums... any help would be much appriciated I have run out of
ideas.
Thanks
ofanged1

 

[Tom Pepper Willett]

Win XP Home cannot join a domain, for one thing.

| Recently I was reffered to a new client. "The system is so messed up", she
| said, "He probably had no clue what he was doing...". I knew I was in for
| some fun. A domain for a reality company and a construction company the
first
| problem I noticed was the naming convention for the domain. Some use a
proper
| DNS name, company.com or company.local or some variation resembling a
proper
| name. This domain is named Company1.Comany2, pffff! After finding half the
| client computers are running windows home, I logged into the domain
| controller, prompted with a message screen "Welcome to domain!" after
| pressing ctrl+alt+del i thought must be new to group policy. So, I start,
| run, gpedit.msc. Big suprise, denied, local policy contact your
| administrator. After being denied on a few other msc's (ras, iis, dns,
| exchange sys mngr, mmc.exe) i realize this could be a problem. So I
learned
| of a way to reset group policy settings in the registry once upon a time
and
| start, run, regedit.exe... SUPRISE this is blocked too. So here I am, five
| hairs left to pull out before I call microsoft for $240, and I turn to the
| microsoft forums... any help would be much appriciated I have run out of
| ideas.
| Thanks
| ofanged1

 

[Guest]

indeed windows xp cannot join a domain, this is an easy fix. I guess I sould
have been more specific. My only concern is the fact that I can not enter
author mode on mmc's access any administration modules like exchange system
admin and I cant open the registry. I assume this was done using gpedit.msc
and I cant open that to change the policies set. Does anyone know how to fix
this problem?

 

[Dave Patrick]

An in-place upgrade should restore group policy and security to default.

How to Perform an In-Place Upgrade of Windows 2000
http://support.microsoft.com/support/kb/articles/Q292/1/75.ASP

What an In-Place Windows 2000 Upgrade Changes and What It Does Not Change
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q306952

Be sure to apply these to your repair install before connecting to any
network.

http://download.microsoft.com/download/E/6/A/E6A04295-D2A8-40D0-A0C5-241BFECD095E/W2KSP4_EN.EXE
http://www.microsoft.com/technet/security/bulletin/MS03-043.mspx
http://www.microsoft.com/technet/security/bulletin/MS03-049.mspx

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| indeed windows xp cannot join a domain, this is an easy fix. I guess I
sould
| have been more specific. My only concern is the fact that I can not enter
| author mode on mmc's access any administration modules like exchange
system
| admin and I cant open the registry. I assume this was done using
gpedit.msc
| and I cant open that to change the policies set. Does anyone know how to
fix
| this problem?
|

 

[Guest]

Dave I really appriciate your swift reply. As you can imagine I am concerned
about this move, I hope you don't mind I have a few questions. I notice "What
an In-Place Windows 2000 Upgrade Changes and What It Does Not Change" says to
"be very careful when performing upgrades on a domain controller." Now, I
would assume I shouldn't spill my coffie on the keyboard, and I should
probably run veritas on the system, mailboxes, etc. I guess I should ask, is
there anything else I should be careful of? The system is the only domain
controller in the forest, should I do something to ensure the domain can
still function? And, how may this affect exchange and other programs which
may utilze active directory, like timberline accounting? I notice the article
mentions the in-place upgrade will not affect any installed components or
programs, but what about the link between some programs and the os. Indeed, I
will call timberline support for their opinion on this install and disaster
recovery advise.
Any expetise on this situation will be greatly apriciated.
I will attempt to perform this operation in a lab first, thank you Dave.

 

[Dave Patrick]

You might also ask them here if there's another way with group policy.

http://www.microsoft.com/communitie...56b-6bf5-4600-b26e-8a768f9cb345&lang=en&cr=US

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Dave I really appriciate your swift reply. As you can imagine I am
concerned
| about this move, I hope you don't mind I have a few questions. I notice
"What
| an In-Place Windows 2000 Upgrade Changes and What It Does Not Change" says
to
| "be very careful when performing upgrades on a domain controller." Now, I
| would assume I shouldn't spill my coffie on the keyboard, and I should
| probably run veritas on the system, mailboxes, etc. I guess I should ask,
is
| there anything else I should be careful of? The system is the only domain
| controller in the forest, should I do something to ensure the domain can
| still function? And, how may this affect exchange and other programs which
| may utilze active directory, like timberline accounting? I notice the
article
| mentions the in-place upgrade will not affect any installed components or
| programs, but what about the link between some programs and the os.
Indeed, I
| will call timberline support for their opinion on this install and
disaster
| recovery advise.
| Any expetise on this situation will be greatly apriciated.
| I will attempt to perform this operation in a lab first, thank you Dave.