Guest Stonecold316 Posted August 26, 2008 Posted August 26, 2008 A bunch of my servers that had domain login accounts set for services started losing thier permissions and i would have to go back open the service and hit ok and the service would start. This happens with any service that used a domain admin account
Guest Meinolf Weber Posted August 26, 2008 Posted August 26, 2008 Re: Services losing logon privs Hello Stonecold316, They will not just stopping without something has happened. Has you or someone reconfigured policies or updated the machines, changed passwords or reconfigured security settings? Even it is not the best solution to use domain admin accounts for services, the better way is to use normal user accounts with a long strong password, which is kept on a safe place, and grant the accounts only the needed rights. Maybe one time a year you can reset the passwords if needed. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > A bunch of my servers that had domain login accounts set for services > started losing thier permissions and i would have to go back open the > service and hit ok and the service would start. This happens with any > service that used a domain admin account >
Guest Stonecold316 Posted August 26, 2008 Posted August 26, 2008 Re: Services losing logon privs I know some windows updates have been done and we lost a backup domain controller a few weeks ago. they main service is backup exec which was never chaneg to a backup account. "Meinolf Weber" wrote: > Hello Stonecold316, > > They will not just stopping without something has happened. Has you or someone > reconfigured policies or updated the machines, changed passwords or reconfigured > security settings? > > Even it is not the best solution to use domain admin accounts for services, > the better way is to use normal user accounts with a long strong password, > which is kept on a safe place, and grant the accounts only the needed rights. > Maybe one time a year you can reset the passwords if needed. > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > > > > A bunch of my servers that had domain login accounts set for services > > started losing thier permissions and i would have to go back open the > > service and hit ok and the service would start. This happens with any > > service that used a domain admin account > > > > >
Guest Meinolf Weber Posted August 26, 2008 Posted August 26, 2008 Re: Services losing logon privs Hello Stonecold316, Did you check your event viewer for errors? What kind of permissions do you mean what they loose? Whas the crached machine removed correctly from the domain or is it reinstalled from backup? Did you check replication between your DC's before? Is it since that crash that you have the problems? Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > I know some windows updates have been done and we lost a backup domain > controller a few weeks ago. they main service is backup exec which was > never chaneg to a backup account. > > "Meinolf Weber" wrote: > >> Hello Stonecold316, >> >> They will not just stopping without something has happened. Has you >> or someone reconfigured policies or updated the machines, changed >> passwords or reconfigured security settings? >> >> Even it is not the best solution to use domain admin accounts for >> services, the better way is to use normal user accounts with a long >> strong password, which is kept on a safe place, and grant the >> accounts only the needed rights. Maybe one time a year you can reset >> the passwords if needed. >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers >> no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> A bunch of my servers that had domain login accounts set for >>> services started losing thier permissions and i would have to go >>> back open the service and hit ok and the service would start. This >>> happens with any service that used a domain admin account >>>
Guest Stonecold316 Posted August 26, 2008 Posted August 26, 2008 Re: Services losing logon privs For backup exec we get "The Backup Exec Device & Media Service service failed to start due to the following error: The service did not start due to a logon failure." in the event log. The bdc was removed manully redone so it is a bdc again but not from tape. "Meinolf Weber" wrote: > Hello Stonecold316, > > Did you check your event viewer for errors? What kind of permissions do you > mean what they loose? Whas the crached machine removed correctly from the > domain or is it reinstalled from backup? Did you check replication between > your DC's before? Is it since that crash that you have the problems? > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > > > > I know some windows updates have been done and we lost a backup domain > > controller a few weeks ago. they main service is backup exec which was > > never chaneg to a backup account. > > > > "Meinolf Weber" wrote: > > > >> Hello Stonecold316, > >> > >> They will not just stopping without something has happened. Has you > >> or someone reconfigured policies or updated the machines, changed > >> passwords or reconfigured security settings? > >> > >> Even it is not the best solution to use domain admin accounts for > >> services, the better way is to use normal user accounts with a long > >> strong password, which is kept on a safe place, and grant the > >> accounts only the needed rights. Maybe one time a year you can reset > >> the passwords if needed. > >> > >> Best regards > >> > >> Meinolf Weber > >> Disclaimer: This posting is provided "AS IS" with no warranties, and > >> confers > >> no rights. > >> ** Please do NOT email, only reply to Newsgroups > >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > >>> A bunch of my servers that had domain login accounts set for > >>> services started losing thier permissions and i would have to go > >>> back open the service and hit ok and the service would start. This > >>> happens with any service that used a domain admin account > >>> > > >
Guest Stonecold316 Posted August 26, 2008 Posted August 26, 2008 Re: Services losing logon privs think i found the issue. someone changed the logon as service domain policy and did not include that account "Meinolf Weber" wrote: > Hello Stonecold316, > > Did you check your event viewer for errors? What kind of permissions do you > mean what they loose? Whas the crached machine removed correctly from the > domain or is it reinstalled from backup? Did you check replication between > your DC's before? Is it since that crash that you have the problems? > > Best regards > > Meinolf Weber > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > ** Please do NOT email, only reply to Newsgroups > ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > > > > I know some windows updates have been done and we lost a backup domain > > controller a few weeks ago. they main service is backup exec which was > > never chaneg to a backup account. > > > > "Meinolf Weber" wrote: > > > >> Hello Stonecold316, > >> > >> They will not just stopping without something has happened. Has you > >> or someone reconfigured policies or updated the machines, changed > >> passwords or reconfigured security settings? > >> > >> Even it is not the best solution to use domain admin accounts for > >> services, the better way is to use normal user accounts with a long > >> strong password, which is kept on a safe place, and grant the > >> accounts only the needed rights. Maybe one time a year you can reset > >> the passwords if needed. > >> > >> Best regards > >> > >> Meinolf Weber > >> Disclaimer: This posting is provided "AS IS" with no warranties, and > >> confers > >> no rights. > >> ** Please do NOT email, only reply to Newsgroups > >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > >>> A bunch of my servers that had domain login accounts set for > >>> services started losing thier permissions and i would have to go > >>> back open the service and hit ok and the service would start. This > >>> happens with any service that used a domain admin account > >>> > > >
Guest Meinolf Weber Posted August 26, 2008 Posted August 26, 2008 Re: Services losing logon privs Hello Stonecold316, Nice to hear that you found it. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm > think i found the issue. someone changed the logon as service domain > policy and did not include that account > > "Meinolf Weber" wrote: > >> Hello Stonecold316, >> >> Did you check your event viewer for errors? What kind of permissions >> do you mean what they loose? Whas the crached machine removed >> correctly from the domain or is it reinstalled from backup? Did you >> check replication between your DC's before? Is it since that crash >> that you have the problems? >> >> Best regards >> >> Meinolf Weber >> Disclaimer: This posting is provided "AS IS" with no warranties, and >> confers >> no rights. >> ** Please do NOT email, only reply to Newsgroups >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>> I know some windows updates have been done and we lost a backup >>> domain controller a few weeks ago. they main service is backup exec >>> which was never chaneg to a backup account. >>> >>> "Meinolf Weber" wrote: >>> >>>> Hello Stonecold316, >>>> >>>> They will not just stopping without something has happened. Has you >>>> or someone reconfigured policies or updated the machines, changed >>>> passwords or reconfigured security settings? >>>> >>>> Even it is not the best solution to use domain admin accounts for >>>> services, the better way is to use normal user accounts with a long >>>> strong password, which is kept on a safe place, and grant the >>>> accounts only the needed rights. Maybe one time a year you can >>>> reset the passwords if needed. >>>> >>>> Best regards >>>> >>>> Meinolf Weber >>>> Disclaimer: This posting is provided "AS IS" with no warranties, >>>> and >>>> confers >>>> no rights. >>>> ** Please do NOT email, only reply to Newsgroups >>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm >>>>> A bunch of my servers that had domain login accounts set for >>>>> services started losing thier permissions and i would have to go >>>>> back open the service and hit ok and the service would start. This >>>>> happens with any service that used a domain admin account >>>>>
Recommended Posts