Solved

Active directory not opening after apply plug n play service disable through GPO

Posted on 2014-04-05
15
714 Views
Last Modified: 2014-04-05
I have active directory n domain controller on Windows server 2008 r2. Yesterday i have disable two services as part of hardening, Print spooler and plug n play services.I ran gpupdate /force command. After some time, Windows activation windows is popping on my server. Even active directory users n computers is not opening and GPO console is not opening. i have attached two error screenshots when i try to open GPO console now. I am unable to start the plug n play service even i have logged in with domain administrator account. plaese help.
GPO-Error.JPG
GPO-error2.JPG
0
Comment
Question by:syinfra
15 Comments
 
LVL 17

Expert Comment

by:Kent Dyer
ID: 39979719
What is the first rule of change management - if you are unable to open an app because of the result of the change you just made..  roll it back - period..

Once you have rolled it back - does AD work again?

If it works, take the new code into a test lab and sort it out there.
0
 
LVL 16

Expert Comment

by:Shaik M. Sajid
ID: 39979721
start the plug and play service and restart the domain .. then check
0
 

Author Comment

by:syinfra
ID: 39979732
Hi Shaik,

I am unable to start the service of Plug n Play. This is my big problem. Any workaround for this. I have doing this by logging with Domain administrator.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 16

Expert Comment

by:Shaik M. Sajid
ID: 39979757
go to the services... right click the plug and play service

check dependencies ..

and start them all...

in services - click start up type - automatic status services should started..

try this...
0
 

Author Comment

by:syinfra
ID: 39979776
dependencies services are also disabled and cannot be enabled or start through this user. Any other idea?
0
 
LVL 16

Expert Comment

by:Shaik M. Sajid
ID: 39979779
did u tried in safe mode ?
0
 
LVL 16

Expert Comment

by:Shaik M. Sajid
ID: 39979782
is it physical server or virtualserver ?
0
 

Author Comment

by:syinfra
ID: 39979868
A Virtual server in Hyper v
0
 

Author Comment

by:syinfra
ID: 39979878
Server is running in Safe mode. But it is not giving access to start this service.
0
 
LVL 16

Expert Comment

by:Shaik M. Sajid
ID: 39979890
check the virtual disk service ...


go to services. and start the virtual disk service

all the best
0
 
LVL 16

Expert Comment

by:Shaik M. Sajid
ID: 39979893
virtual disk service is depends on plug n play services... check weather it's start or not...

if not start it...
0
 

Author Comment

by:syinfra
ID: 39979927
We have checked, but still whenever i tried to start virtual disk service. It is saying the dependency service not started, so it could not start. ERROR 1068
0
 
LVL 16

Accepted Solution

by:
Shaik M. Sajid earned 500 total points
ID: 39979967
go to regedit

Please navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PlugPlay and
locate Start registry key

right click Start registry key Edit Dward Value  (value Data change to 2) select the Hexa Decimal

Change Startup type : Automatic -2

Automatic - 2

please take backup of your registry firs before attempting to regedit.
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39980004
Have you tried to restart domain controller in normal mode, if yes, what error you are getting ? still you are facing same issues ?

If yes, How many domain controllers do you have ?

if you have more than one functional DCs, check if you are able to open all AD snap ins including GPMC on another functional server
Also check if all AD services are running on that server for ex:
Netlogon
NTFRS (File replication service)
Intersite messaging
Kerberos key distribution center
security accounts manager
AD domain services
Also check if Sysvol and netlogon shares are populated

In that case just remove affected server from network and if it contains FSMO roles just seize them on functional DC then do metadata cleanup on functional DC and rebuild the affected server from scratch and promote it again as ADC

if this is the only domain controller you have, then check if you have valid AD system state backup and if yes, just make authoritative restore of system state on affected server by restarting it in directory service restore mode and then check if its working

Mahesh.
0
 

Author Closing Comment

by:syinfra
ID: 39980022
Woilla.....Excellent. I have never think that i can escape from this problem. But yess, after mad these registry changes, i got my DC back.

GURU.....You too good man. God for me.

Cheers,

You deserves a bottle.

-Abhijit
From Syinfra
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question