Solved

Group Policy has caused vital services to be disabled

Posted on 2008-10-28
14
950 Views
Last Modified: 2012-05-05
Some of our servers have had a group policy applied that disabled a large number of vital services.

The changes to the policy have been undone but it seems as though the damage is done. The servers that have had the services disabled are not picking up the new policy.

On the servers if I load services.msc I cannot see anything in the extended view. I can see all the services in the standard view however upon trying to access the properties of a disabled service I get the following message "Configuration Manager: The Plug and Play service or another required service is not available"

I am unable to start any service set to manual or automatic because of the dependencies.

I cant check out event viewer because its snap-ins are not working properly either. I can see the events but I can open them.

About the only thing I have is ip connectivity to the local DC and have tried a gpupdate /force but I think the services required to update the policy are not there.

This is a real mess.
0
Comment
Question by:dgjlee
  • 7
  • 7
14 Comments
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
Comment Utility
Try going to run then typing MSCONFIG then go to the services tab to see if you can enable the disabled services.
0
 
LVL 1

Author Comment

by:dgjlee
Comment Utility
Thanks for a swift response. I have loaded msconfig gone to the services tab and I can see all of the services are stopped. I have tried enable all but no joy.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
Have you done a restart yet?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
Sorry also try Safe Mode.
0
 
LVL 1

Author Comment

by:dgjlee
Comment Utility
Tried a restart but all services still stoped. How do initiate safe mode?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
When you reboot press the F8 key before 2003 loads. Are you sure that you removed  the GPO?
0
 
LVL 1

Author Comment

by:dgjlee
Comment Utility
The GPO has been chnaged so that what was locked is now back to how it should be.

Starting in safe mode and trying msconfig  has not made any difference.
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 500 total points
Comment Utility
I would disable the GPO all together to make sure this isn't the issue.
0
 
LVL 1

Author Comment

by:dgjlee
Comment Utility
Thanks for your help. The server has been excluded from all GPO's. I have tried another msconfig , disable all apply, enable all apply, restart without any change and the same again. I have also tried re-enabling the services under safe mode using services.msc but get the same error as in my original request for help. I can see in msconfig that it sya the RPC service cannot be disabled but it is.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
Try just turning on the plug play services.
0
 
LVL 1

Accepted Solution

by:
dgjlee earned 0 total points
Comment Utility
It's unable to start due to dependency's.

However I think I am winning. I have just remembered the sc command for configuring services. I have just run "sc config rpcss start= auto" then "sc start rpcss"

This got my rpc service running so I can now use services.msc to edit the rest of the services. Just need to work out what needs enabling to auto!
0
 
LVL 1

Author Comment

by:dgjlee
Comment Utility
I want to thank you for you help as you helped a tired addled brain go in the right direction so I have awarded you the points. Further questions may follow!
0
 
LVL 1

Author Comment

by:dgjlee
Comment Utility
Moderators... Can you assign points to the expert but select my post as the solution please
0
 
LVL 59

Expert Comment

by:Darius Ghassem
Comment Utility
What you can do is follow these instructions and select your comment as the solution the zero your points out. Try to see if this helps.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/ME/Q_22783204.html
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now