Services losing logon privs

[Guest Stonecold316]

A bunch of my servers that had domain login accounts set for services started

losing thier permissions and i would have to go back open the service and hit

ok and the service would start. This happens with any service that used a

domain admin account

[Guest Meinolf Weber]

Re: Services losing logon privs

 

Hello Stonecold316,

 

They will not just stopping without something has happened. Has you or someone

reconfigured policies or updated the machines, changed passwords or reconfigured

security settings?

 

Even it is not the best solution to use domain admin accounts for services,

the better way is to use normal user accounts with a long strong password,

which is kept on a safe place, and grant the accounts only the needed rights.

Maybe one time a year you can reset the passwords if needed.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> A bunch of my servers that had domain login accounts set for services

> started losing thier permissions and i would have to go back open the

> service and hit ok and the service would start. This happens with any

> service that used a domain admin account

>

[Guest Stonecold316]

Re: Services losing logon privs

 

I know some windows updates have been done and we lost a backup domain

controller a few weeks ago. they main service is backup exec which was never

chaneg to a backup account.

 

"Meinolf Weber" wrote:

> Hello Stonecold316,

>

> They will not just stopping without something has happened. Has you or someone

> reconfigured policies or updated the machines, changed passwords or reconfigured

> security settings?

>

> Even it is not the best solution to use domain admin accounts for services,

> the better way is to use normal user accounts with a long strong password,

> which is kept on a safe place, and grant the accounts only the needed rights.

> Maybe one time a year you can reset the passwords if needed.

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

>

> > A bunch of my servers that had domain login accounts set for services

> > started losing thier permissions and i would have to go back open the

> > service and hit ok and the service would start. This happens with any

> > service that used a domain admin account

> >

>

>

>

[Guest Meinolf Weber]

Re: Services losing logon privs

 

Hello Stonecold316,

 

Did you check your event viewer for errors? What kind of permissions do you

mean what they loose? Whas the crached machine removed correctly from the

domain or is it reinstalled from backup? Did you check replication between

your DC's before? Is it since that crash that you have the problems?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> I know some windows updates have been done and we lost a backup domain

> controller a few weeks ago. they main service is backup exec which was

> never chaneg to a backup account.

>

> "Meinolf Weber" wrote:

>

>> Hello Stonecold316,

>>

>> They will not just stopping without something has happened. Has you

>> or someone reconfigured policies or updated the machines, changed

>> passwords or reconfigured security settings?

>>

>> Even it is not the best solution to use domain admin accounts for

>> services, the better way is to use normal user accounts with a long

>> strong password, which is kept on a safe place, and grant the

>> accounts only the needed rights. Maybe one time a year you can reset

>> the passwords if needed.

>>

>> Best regards

>>

>> Meinolf Weber

>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>> confers

>> no rights.

>> ** Please do NOT email, only reply to Newsgroups

>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> A bunch of my servers that had domain login accounts set for

>>> services started losing thier permissions and i would have to go

>>> back open the service and hit ok and the service would start. This

>>> happens with any service that used a domain admin account

>>>

[Guest Stonecold316]

Re: Services losing logon privs

 

For backup exec we get "The Backup Exec Device & Media Service service failed

to start due to the following error:

The service did not start due to a logon failure." in the event log. The bdc

was removed manully redone so it is a bdc again but not from tape.

 

"Meinolf Weber" wrote:

> Hello Stonecold316,

>

> Did you check your event viewer for errors? What kind of permissions do you

> mean what they loose? Whas the crached machine removed correctly from the

> domain or is it reinstalled from backup? Did you check replication between

> your DC's before? Is it since that crash that you have the problems?

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

>

> > I know some windows updates have been done and we lost a backup domain

> > controller a few weeks ago. they main service is backup exec which was

> > never chaneg to a backup account.

> >

> > "Meinolf Weber" wrote:

> >

> >> Hello Stonecold316,

> >>

> >> They will not just stopping without something has happened. Has you

> >> or someone reconfigured policies or updated the machines, changed

> >> passwords or reconfigured security settings?

> >>

> >> Even it is not the best solution to use domain admin accounts for

> >> services, the better way is to use normal user accounts with a long

> >> strong password, which is kept on a safe place, and grant the

> >> accounts only the needed rights. Maybe one time a year you can reset

> >> the passwords if needed.

> >>

> >> Best regards

> >>

> >> Meinolf Weber

> >> Disclaimer: This posting is provided "AS IS" with no warranties, and

> >> confers

> >> no rights.

> >> ** Please do NOT email, only reply to Newsgroups

> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> >>> A bunch of my servers that had domain login accounts set for

> >>> services started losing thier permissions and i would have to go

> >>> back open the service and hit ok and the service would start. This

> >>> happens with any service that used a domain admin account

> >>>

>

>

>

[Guest Stonecold316]

Re: Services losing logon privs

 

think i found the issue. someone changed the logon as service domain policy

and did not include that account

 

"Meinolf Weber" wrote:

> Hello Stonecold316,

>

> Did you check your event viewer for errors? What kind of permissions do you

> mean what they loose? Whas the crached machine removed correctly from the

> domain or is it reinstalled from backup? Did you check replication between

> your DC's before? Is it since that crash that you have the problems?

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

>

> > I know some windows updates have been done and we lost a backup domain

> > controller a few weeks ago. they main service is backup exec which was

> > never chaneg to a backup account.

> >

> > "Meinolf Weber" wrote:

> >

> >> Hello Stonecold316,

> >>

> >> They will not just stopping without something has happened. Has you

> >> or someone reconfigured policies or updated the machines, changed

> >> passwords or reconfigured security settings?

> >>

> >> Even it is not the best solution to use domain admin accounts for

> >> services, the better way is to use normal user accounts with a long

> >> strong password, which is kept on a safe place, and grant the

> >> accounts only the needed rights. Maybe one time a year you can reset

> >> the passwords if needed.

> >>

> >> Best regards

> >>

> >> Meinolf Weber

> >> Disclaimer: This posting is provided "AS IS" with no warranties, and

> >> confers

> >> no rights.

> >> ** Please do NOT email, only reply to Newsgroups

> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> >>> A bunch of my servers that had domain login accounts set for

> >>> services started losing thier permissions and i would have to go

> >>> back open the service and hit ok and the service would start. This

> >>> happens with any service that used a domain admin account

> >>>

>

>

>

[Guest Meinolf Weber]

Re: Services losing logon privs

 

Hello Stonecold316,

 

Nice to hear that you found it.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

> think i found the issue. someone changed the logon as service domain

> policy and did not include that account

>

> "Meinolf Weber" wrote:

>

>> Hello Stonecold316,

>>

>> Did you check your event viewer for errors? What kind of permissions

>> do you mean what they loose? Whas the crached machine removed

>> correctly from the domain or is it reinstalled from backup? Did you

>> check replication between your DC's before? Is it since that crash

>> that you have the problems?

>>

>> Best regards

>>

>> Meinolf Weber

>> Disclaimer: This posting is provided "AS IS" with no warranties, and

>> confers

>> no rights.

>> ** Please do NOT email, only reply to Newsgroups

>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> I know some windows updates have been done and we lost a backup

>>> domain controller a few weeks ago. they main service is backup exec

>>> which was never chaneg to a backup account.

>>>

>>> "Meinolf Weber" wrote:

>>>

>>>> Hello Stonecold316,

>>>>

>>>> They will not just stopping without something has happened. Has you

>>>> or someone reconfigured policies or updated the machines, changed

>>>> passwords or reconfigured security settings?

>>>>

>>>> Even it is not the best solution to use domain admin accounts for

>>>> services, the better way is to use normal user accounts with a long

>>>> strong password, which is kept on a safe place, and grant the

>>>> accounts only the needed rights. Maybe one time a year you can

>>>> reset the passwords if needed.

>>>>

>>>> Best regards

>>>>

>>>> Meinolf Weber

>>>> Disclaimer: This posting is provided "AS IS" with no warranties,

>>>> and

>>>> confers

>>>> no rights.

>>>> ** Please do NOT email, only reply to Newsgroups

>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>>>> A bunch of my servers that had domain login accounts set for

>>>>> services started losing thier permissions and i would have to go

>>>>> back open the service and hit ok and the service would start. This

>>>>> happens with any service that used a domain admin account

>>>>>