|
|
Our Hot Pick: Rising Antivirus 2006 - Certified by TUV & Checkmark! Get 10% discount by entering this coupon code: ONDISCOUNT10
I have a SBS 2000 network with W2K SP4 clients. On the client
machines, when logged in to an account that is a member of the Domain
User group ipconfig /registerdns fails with an error "Access is
denied". This works fine for a Domain Admin user.
The clients are configured with two NIC's. One is connected through a
router/firewall to an ISP, and the other to the SBS. The "external"
NIC has a static IP and a specified DNS. The SBS NIC is configured
for dynamic. In the event log I can see that the NIC that failed was
the connection to SBS. Of course I don't care about that one anyway,
but have had no luck turning it off for the registration.
We are having ISP problems, and re-registering DNS prevents a full
reboot when the connections go down.
I've spent most of the day looking for an answer, with no luck. Any
ideas how I can give my users permissions to run this, or to stop the
SBS NIC from trying to register?
|
|
Hello,
Thanks for posting in our newsgroup.
From your description, I know that when a non-admin user runs ipconfig
/registerdns, you get "Access is denied". There is no such issue with
Domain Admin user. If I am off-base, please don't hesitate to let me know.
Please let me know the following information to make the situation more
clearly:
Please try the following steps to see if the problem can be resolved:
Step 1: The problem occurs if user has on permission visiting TCPIP,
please give the Full Control permission to everyone on Windows 2000.
1. Open Registry Editor ( Please run Regedt32.exe).
2. On the HKEY_LOCAL_MACHINE on Local Machine page, locate the following
registry key:
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip
3. On the Security menu, click Permissions.
4. Click Add on the Security tab.
5. In the Look in box, everyone.
6. Give everyone permission:
Read & full control
7. Try again.
If the problem persists, please help me collect the following information
for further research:
MPS-Report on both SBS server and Windows 2000 client
1) Download MPSreport_network from
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE
2) Run MPSRPT_NETWORK.exe on the server box.
3) The tool will automatically collect the information. This procedure will
take 10~15 minutes.
4) Open Windows Explorer, navigate to the folder:
%SystemRoot%\MPSReports\Network\Reports\Cab\
5) Send the .cab file directly to v-robeli[ at ]microsoft.com with subject:
39841816-Domain User fails to registerdns.
I am looking forward to hear from you.
If you need further assistance, please don't hesitate to let me know.
Best regards,
Robert Li(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
|
|
Robert,
Thanks for getting back to me. I tried your suggested registry
change, but things remain unchanged. I then attempted to download the
tool but I'm afraid the page is not working for me. Could you email
me the tool?
Paul
|
|
Hi Paul,
Thanks for your reply.
I check the MPS Report, please take the following step:
The problem occurs when USERDUMP.SYS driver is loaded on the Windows 2000
client workstation. Please have a check.
You can uninstall USERDUMP.EXE from Add/Remove Programs
More info:
How to remove USERDUMP
UserDump and its documentation are part of the OEM Support Tools package
and can be
downloaded from
http://download.microsoft.com/download/win2000srv/Utility/3.0/NT45/EN-US/Oem
3sr2.zip
.
This package includes a "setup.exe". For removing this package, you have to
launch: "setup -r"
==========================================
Below is a small explanation on what the Driver does.
==========================================
The security descriptor onto the network device class is set in a hard
coded manner. However, the USERDUMP.SYS driver modifies this security
descriptor just
after being loaded!
No loading the driver and the service related to "userdump" into the
registry (by setting the "start" value to 4) has been used for validating
the conclusion. In
fact, if the USERDUMP driver is not loaded, then the initial symptoms
(Access
denied with ipconfig and with browsing) are goes away!
Also I need to double confirm you modified the registry key on client which
you ran ipconfig /registerdns.
Please also help me collect MPS Report on Windows 2000 client on which you
ran ipconfig /registerdns. I checked the link and this works.
1. Download the MPSRPT_NETWORK.EXE from the following link and then run
this tool to gather some information from the problematic computer:
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE
2. Double-click on the MPSRPT_NETWORK.EXE file.
[Note] This process may take some time; however, it will not have a
negative effect on the performance.
3. A CAB file will be generated in the
%systemroot%\MPSReports\Network\Reports\Cab directory called
%COMPUTERNAME%_MPSReports.CAB. The CAB file will contain the reports
generated by the MPS Reporting Tool.
4. Please send the CAB to v-robeli[ at ]microsoft.com with subject:
39841816-Domain User fails to registerdns.
I am looking forward to hear from you.
If you need further assistance, please don't hesitate to let me know.
Best regards,
Robert Li(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
<From: Pablo <p_d_moore[ at ]yahoo.com>
<Newsgroups: microsoft.public.windows.server.sbs
<Subject: Re: Domain User fails to registerdns
<Date: Wed, 11 Jul 2007 07:06:07 -0700
<Organization: http://groups.google.com
<Lines: 9
<Message-ID: <1184162767.836945.64640[ at ]a26g2000pre.googlegroups.com>
<References: <1184046110.052260.251610[ at ]j4g2000prf.googlegroups.com>
< <sJNQKR6wHHA.4308[ at ]TK2MSFTNGHUB02.phx.gbl>
<NNTP-Posting-Host: 68.15.26.89
<Mime-Version: 1.0
<Content-Type: text/plain; charset="us-ascii"
<X-Trace: posting.google.com 1184162768 25265 127.0.0.1 (11 Jul 2007
14:06:08 GMT)
<X-Complaints-To: groups-abuse[ at ]google.com
<NNTP-Posting-Date: Wed, 11 Jul 2007 14:06:08 +0000 (UTC)
<In-Reply-To: <sJNQKR6wHHA.4308[ at ]TK2MSFTNGHUB02.phx.gbl>
<User-Agent: G2/1.0
<X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.0),gzip(gfe),gzip(gfe)
<Complaints-To: groups-abuse[ at ]google.com
<Injection-Info: a26g2000pre.googlegroups.com; posting-host=68.15.26.89;
< posting-account=dSwEjw0AAAAAszSNuzN8Hz91O55cDGvV
<Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!news-out.
cwix.com!newsfeed.cwix.com!newscon02.news.prodigy.net!prodigy.net!news.glorb
.com!postnews.google.com!a26g2000pre.googlegroups.com!not-for-mail
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:49718
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Robert,
<
<Thanks for getting back to me. I tried your suggested registry
<change, but things remain unchanged. I then attempted to download the
<tool but I'm afraid the page is not working for me. Could you email
<me the tool?
<
<Paul
<
<
|
|
Hi Paul,
Thanks for the information you provided. I researched on the report but
couldn't found any clue of the root cause.
Please try to create a new domain user and log on Windows 2000 workstation,
can the problem be reproduced?
I am researching on your issue and will let you know the result as soon as
possible. Thanks for your understanding.
Best regards,
Robert Li(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
<X-Tomcat-ID: 139417857
<References: <1184046110.052260.251610[ at ]j4g2000prf.googlegroups.com>
<1184162767.836945.64640[ at ]a26g2000pre.googlegroups.com>
<MIME-Version: 1.0
<Content-Type: text/plain
<Content-Transfer-Encoding: 7bit
<From: v-robeli[ at ]online.microsoft.com (Robert Li [MSFT])
<Organization: Microsoft
<Date: Thu, 12 Jul 2007 09:58:27 GMT
<Subject: Re: Domain User fails to registerdns
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<Message-ID: <CEB72sGxHHA.5836[ at ]TK2MSFTNGHUB02.phx.gbl>
<Newsgroups: microsoft.public.windows.server.sbs
<Lines: 138
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:49931
<NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182
<
<Hi Paul,
<
<Thanks for your reply.
<
<I check the MPS Report, please take the following step:
<
<The problem occurs when USERDUMP.SYS driver is loaded on the Windows 2000
<client workstation. Please have a check.
<
<You can uninstall USERDUMP.EXE from Add/Remove Programs
<
<More info:
<
<How to remove USERDUMP
<
<UserDump and its documentation are part of the OEM Support Tools package
<and can be
<downloaded from
<http://download.microsoft.com/download/win2000srv/Utility/3.0/NT45/EN-US/Oe
m
<3sr2.zip
<.
<This package includes a "setup.exe". For removing this package, you have
to
<launch: "setup -r"
<
<==========================================
<Below is a small explanation on what the Driver does.
<==========================================
<The security descriptor onto the network device class is set in a hard
<coded manner. However, the USERDUMP.SYS driver modifies this security
<descriptor just
<after being loaded!
<No loading the driver and the service related to "userdump" into the
<registry (by setting the "start" value to 4) has been used for validating
<the conclusion. In
<fact, if the USERDUMP driver is not loaded, then the initial symptoms
<(Access
<denied with ipconfig and with browsing) are goes away!
<
<Also I need to double confirm you modified the registry key on client
which
<you ran ipconfig /registerdns.
<
<Please also help me collect MPS Report on Windows 2000 client on which you
<ran ipconfig /registerdns. I checked the link and this works.
<
<1. Download the MPSRPT_NETWORK.EXE from the following link and then run
<this tool to gather some information from the problematic computer:
<http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd
9
<15706/MPSRPT_NETWORK.EXE
<2. Double-click on the MPSRPT_NETWORK.EXE file.
<[Note] This process may take some time; however, it will not have a
<negative effect on the performance.
<3. A CAB file will be generated in the
<%systemroot%\MPSReports\Network\Reports\Cab directory called
<%COMPUTERNAME%_MPSReports.CAB. The CAB file will contain the reports
<generated by the MPS Reporting Tool.
<4. Please send the CAB to v-robeli[ at ]microsoft.com with subject:
<39841816-Domain User fails to registerdns.
<
<I am looking forward to hear from you.
<
<If you need further assistance, please don't hesitate to let me know.
<
<Best regards,
<
<Robert Li(MSFT)
<
<Microsoft CSS Online Newsgroup Support
<
<Get Secure! - www.microsoft.com/security
<
<=====================================================
<
<This newsgroup only focuses on SBS technical issues. If you have issues
<regarding other Microsoft products, you'd better post in the corresponding
<newsgroups so that they can be resolved in an efficient and timely manner.
<You can locate the newsgroup here:
<http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<
<When opening a new thread via the web interface, we recommend you check
the
<"Notify me of replies" box to receive e-mail notifications when there are
<any updates in your thread. When responding to posts via your newsreader,
<please "Reply to Group" so that others may learn and benefit from your
<issue.
<
<Microsoft engineers can only focus on one issue per thread. Although we
<provide other information for your reference, we recommend you post
<different incidents in different threads to keep the thread clean. In
doing
<so, it will ensure your issues are resolved in a timely manner.
<
<For urgent issues, you may want to contact Microsoft CSS directly. Please
<check http://support.microsoft.com for regional support phone numbers.
<
<Any input or comments in this thread are highly appreciated.
<
<=====================================================
<
<This posting is provided "AS IS" with no warranties, and confers no rights.
<
<--------------------
<<From: Pablo <p_d_moore[ at ]yahoo.com>
<<Newsgroups: microsoft.public.windows.server.sbs
<<Subject: Re: Domain User fails to registerdns
<<Date: Wed, 11 Jul 2007 07:06:07 -0700
<<Organization: http://groups.google.com
<<Lines: 9
<<Message-ID: <1184162767.836945.64640[ at ]a26g2000pre.googlegroups.com>
<<References: <1184046110.052260.251610[ at ]j4g2000prf.googlegroups.com>
<< <sJNQKR6wHHA.4308[ at ]TK2MSFTNGHUB02.phx.gbl>
<<NNTP-Posting-Host: 68.15.26.89
<<Mime-Version: 1.0
<<Content-Type: text/plain; charset="us-ascii"
<<X-Trace: posting.google.com 1184162768 25265 127.0.0.1 (11 Jul 2007
<14:06:08 GMT)
<<X-Complaints-To: groups-abuse[ at ]google.com
<<NNTP-Posting-Date: Wed, 11 Jul 2007 14:06:08 +0000 (UTC)
<<In-Reply-To: <sJNQKR6wHHA.4308[ at ]TK2MSFTNGHUB02.phx.gbl>
<<User-Agent: G2/1.0
<<X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
<5.0),gzip(gfe),gzip(gfe)
<<Complaints-To: groups-abuse[ at ]google.com
<<Injection-Info: a26g2000pre.googlegroups.com; posting-host=68.15.26.89;
<< posting-account=dSwEjw0AAAAAszSNuzN8Hz91O55cDGvV
<<Path:
<TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!news-out
|
|
|