Do not use on any
shared computer
September 7, 2008 12:25pm pdt
 
[x]
Attachment Details

Impersonate a client afterauthentication setting change causes services not to start including network connections service

Tags: impersonate, client, after, service
I have a critical issue that seems very similar to the one at:

http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21331824.html?query=network+connections+empty&clearTAFilter=true

I also was working with a web-based application that required changes to be made to the setting "Impersonate a client after authentication" in the group policy editor.  It had me add a specific user that the application needed.  I changed this setting from "not defined" to include this user.  Aparently it also should have had me add some system, service and administrator accounts too.  Further, like a dummy, I made this change in the wrong place.  I made it in the security settings in Domain Controller Security Policy or Domain Security Policy (I forget which), rather than in the local computer group policy.  I'm working on a Windows 2003 domain controller.

Everything seemed okay until the server was rebooted.  Now several key services won't start, including the network connections service.  It just hangs at 'starting...'.  As a result, the network connections window is empty, so there's no way to edit network settings like DNS and such.  The server won't connect to the network of course.

I cannot get into Domain Controller Security Policy or Domain Security Policy on this server.  It gives the error that I have insufficient rights.  I can, however, get into the group policy editor.  When I look at the impersonate a client after authentication setting it did, indeed, get changed to the specific user I has specified earlier.  I was able to remove that user so that this setting is, once again, undefined.  This didn't solve the problem though.  I tried to add Administrators, LOCAL SERVICE, and Administrator, but found that I can't add any users.  When I try, I can actually see the users by browsing or searching AD, but when I try to finish adding I get the error "there are no more endpoints available from the endpoint mapper".

Since this won't connect to the network, I can only work on this server to resolve this.  Yet I don't seem to have the rights needed to make certain changes.  It may be that the network connections service won't start because COM+ won't start (also hangs showsing "starting").  But it all seems to stem from this impersonation setting.

We're really stuck with this server, so any help is appreciated!
Start your free trial to view this solution
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

Question Stats
Zone: OS
Question Asked By: pcspcs
Solution Provided By: DarthMod
Participating Experts: 1
Solution Grade: A
Views: 4
Translate:
Loading Advertisement...
 
[+][-]Author Comment by pcspcs
Author Comment by pcspcs:

All comments and solutions are available to Premium Service Members only.

Start your 7-day free trial and see for yourself why Experts Exchange is the easiest and most proven technology resource in the world. Get Started

Already a member? Login to view this solution.

 
 
[+][-]Administrative Comment by Venabili
Administrative Comment by Venabili:

All comments and solutions are available to Premium Service Members only.

Start your 7-day free trial and see for yourself why Experts Exchange is the easiest and most proven technology resource in the world. Get Started

Already a member? Login to view this solution.

 
 
[+][-]Accepted Solution by DarthMod
Accepted Solution by DarthMod:

All comments and solutions are available to Premium Service Members only.

Start your 7-day free trial and see for yourself why Experts Exchange is the easiest and most proven technology resource in the world. Get Started

Already a member? Login to view this solution.

 
 
Loading Advertisement...
20080723-EE-VQP-34