Link to home
Start Free TrialLog in
Avatar of samntlam
samntlam

asked on

EFS Certificates

When tried reset GPO policy using cmd dcgpofix,
error message:
Error Message:
Unable to read EFS certificates from Registry.pol file of Default Domain Policy.
 The error was:
The network location cannot be reached. For information about network troublesho
oting, see Windows Help.
The restore failed.  See previous messages for more details
Avatar of Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy
Flag of United States of America image

dcgpofix is not an the way to reset SBS's default GPO's.  You need to restore those from a backup of the Group Policies, or if you don't have that, from a full backup of your server.

Jeff
TechSoEasy
Avatar of samntlam
samntlam

ASKER

in your method, (full backup of my server) does that mean I have to re-register my sbs2003 server license?
is there another way to work around?
No, it doesn't mean that at all...  Please review http://sbsurl.com/backup for details on how to restore your server.  But the fact is that you only need to restore the Group Policy Objects which are in

\\SERVERNAME\sysvol\yourdomain.local\Policies\

Jeff
TechSoEasy
I don't have that backup file since this issue from my end was already over a week old and my server keeps a week of backup files which it has been overwrite and copied the policy object from a backup is the same as the one that i currently having problem/issue with.
i tried to reinstall but 3 times it has failed.

in case i forgot to mentioned., i had read your posted previously regarding the issue from another inquired and have also followed every steps that was indicated (links) in the post.

this included (SBS is not Server 2003)!
just one more time before you stop me., is there another way/method to work around?

If you have access to another SBS installation then you can backup the GPO's from there and restore them to the problem SBS.

Jeff
TechSoEasy
I do. but Please kindly offer detail and instruction!(asap)
thank you very much!
I got access from another sbs2003.
i also backup the gpo and bring it into this server
when i mange backup (gpo) attempted to restore them (one at a time)
there was no backup file found even though i've checked and checked again plus follow instruction from link provided?
my issue was, there was no file shown when manage backup (running gpmc.msc)
i am missing some steps but didn't know which?
...
Sorry... I hadn't done this in quite awhile... you need to IMPORT them to the problem SBS.

Jeff
TechSoEasy
that was what i meant (import) and there was no file shown in the manage backup windows box!
if that's the case, (hadn't done it for a while) any other way beside reinstalling the server?
You need to use the Migration Table Editor to modify them for your current domain.

Jeff
TechSoEasy
looks like i am going to have to ask for more detail/instruction on every answer, if you wouldn't mind.
i am sure you're not going to be happy with this on this question(originally) & instance.
ASKER CERTIFIED SOLUTION
Avatar of Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Jeff,
I tried but failed. while performing the task above.,
I came across when Server antvirus program running and detected 2 html net32 sky.p (can't quaranteed, clean or delete!~)
I am not sure these two spywares were the caused but i didn't like the message (norton) telling me that it couldn't deleted?
so my option was obvious.

or unless there's way to remove them!? if you wouldn't offer your opionion on my infected server!

I need advise.,
i need to close this and the other similar ticket since there was no respond from the other gentlemen
can I do that? (just close it and offer him point)

please reply!
Jeff, I've sucessfully removed the infected worms spyware and restarted the server.
I know ran into another issue which I've open another ticket for it.
I hope that some one out there (or maybe you) would able to help me on this.
please note.
thanks!