A bunch of my servers that had domain login accounts set for services started
losing thier permissions and i would have to go back open the service and hit
ok and the service would start. This happens with any service that used a
domain admin account
They will not just stopping without something has happened. Has you or someone
reconfigured policies or updated the machines, changed passwords or reconfigured
security settings?
Even it is not the best solution to use domain admin accounts for services,
the better way is to use normal user accounts with a long strong password,
which is kept on a safe place, and grant the accounts only the needed rights.
Maybe one time a year you can reset the passwords if needed.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> A bunch of my servers that had domain login accounts set for services
> started losing thier permissions and i would have to go back open the
> service and hit ok and the service would start. This happens with any
> service that used a domain admin account
>
I know some windows updates have been done and we lost a backup domain
controller a few weeks ago. they main service is backup exec which was never
chaneg to a backup account.
"Meinolf Weber" wrote:
> Hello Stonecold316,
>
> They will not just stopping without something has happened. Has you or someone
> reconfigured policies or updated the machines, changed passwords or reconfigured
> security settings?
>
> Even it is not the best solution to use domain admin accounts for services,
> the better way is to use normal user accounts with a long strong password,
> which is kept on a safe place, and grant the accounts only the needed rights.
> Maybe one time a year you can reset the passwords if needed.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > A bunch of my servers that had domain login accounts set for services
> > started losing thier permissions and i would have to go back open the
> > service and hit ok and the service would start. This happens with any
> > service that used a domain admin account
> >
>
>
>
Did you check your event viewer for errors? What kind of permissions do you
mean what they loose? Whas the crached machine removed correctly from the
domain or is it reinstalled from backup? Did you check replication between
your DC's before? Is it since that crash that you have the problems?
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> I know some windows updates have been done and we lost a backup domain
> controller a few weeks ago. they main service is backup exec which was
> never chaneg to a backup account.
>
> "Meinolf Weber" wrote:
>
>> Hello Stonecold316,
>>
>> They will not just stopping without something has happened. Has you
>> or someone reconfigured policies or updated the machines, changed
>> passwords or reconfigured security settings?
>>
>> Even it is not the best solution to use domain admin accounts for
>> services, the better way is to use normal user accounts with a long
>> strong password, which is kept on a safe place, and grant the
>> accounts only the needed rights. Maybe one time a year you can reset
>> the passwords if needed.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> A bunch of my servers that had domain login accounts set for
>>> services started losing thier permissions and i would have to go
>>> back open the service and hit ok and the service would start. This
>>> happens with any service that used a domain admin account
>>>
For backup exec we get "The Backup Exec Device & Media Service service failed
to start due to the following error:
The service did not start due to a logon failure." in the event log. The bdc
was removed manully redone so it is a bdc again but not from tape.
"Meinolf Weber" wrote:
> Hello Stonecold316,
>
> Did you check your event viewer for errors? What kind of permissions do you
> mean what they loose? Whas the crached machine removed correctly from the
> domain or is it reinstalled from backup? Did you check replication between
> your DC's before? Is it since that crash that you have the problems?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > I know some windows updates have been done and we lost a backup domain
> > controller a few weeks ago. they main service is backup exec which was
> > never chaneg to a backup account.
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello Stonecold316,
> >>
> >> They will not just stopping without something has happened. Has you
> >> or someone reconfigured policies or updated the machines, changed
> >> passwords or reconfigured security settings?
> >>
> >> Even it is not the best solution to use domain admin accounts for
> >> services, the better way is to use normal user accounts with a long
> >> strong password, which is kept on a safe place, and grant the
> >> accounts only the needed rights. Maybe one time a year you can reset
> >> the passwords if needed.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> A bunch of my servers that had domain login accounts set for
> >>> services started losing thier permissions and i would have to go
> >>> back open the service and hit ok and the service would start. This
> >>> happens with any service that used a domain admin account
> >>>
>
>
>
think i found the issue. someone changed the logon as service domain policy
and did not include that account
"Meinolf Weber" wrote:
> Hello Stonecold316,
>
> Did you check your event viewer for errors? What kind of permissions do you
> mean what they loose? Whas the crached machine removed correctly from the
> domain or is it reinstalled from backup? Did you check replication between
> your DC's before? Is it since that crash that you have the problems?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > I know some windows updates have been done and we lost a backup domain
> > controller a few weeks ago. they main service is backup exec which was
> > never chaneg to a backup account.
> >
> > "Meinolf Weber" wrote:
> >
> >> Hello Stonecold316,
> >>
> >> They will not just stopping without something has happened. Has you
> >> or someone reconfigured policies or updated the machines, changed
> >> passwords or reconfigured security settings?
> >>
> >> Even it is not the best solution to use domain admin accounts for
> >> services, the better way is to use normal user accounts with a long
> >> strong password, which is kept on a safe place, and grant the
> >> accounts only the needed rights. Maybe one time a year you can reset
> >> the passwords if needed.
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> A bunch of my servers that had domain login accounts set for
> >>> services started losing thier permissions and i would have to go
> >>> back open the service and hit ok and the service would start. This
> >>> happens with any service that used a domain admin account
> >>>
>
>
>
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> think i found the issue. someone changed the logon as service domain
> policy and did not include that account
>
> "Meinolf Weber" wrote:
>
>> Hello Stonecold316,
>>
>> Did you check your event viewer for errors? What kind of permissions
>> do you mean what they loose? Whas the crached machine removed
>> correctly from the domain or is it reinstalled from backup? Did you
>> check replication between your DC's before? Is it since that crash
>> that you have the problems?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I know some windows updates have been done and we lost a backup
>>> domain controller a few weeks ago. they main service is backup exec
>>> which was never chaneg to a backup account.
>>>
>>> "Meinolf Weber" wrote:
>>>
>>>> Hello Stonecold316,
>>>>
>>>> They will not just stopping without something has happened. Has you
>>>> or someone reconfigured policies or updated the machines, changed
>>>> passwords or reconfigured security settings?
>>>>
>>>> Even it is not the best solution to use domain admin accounts for
>>>> services, the better way is to use normal user accounts with a long
>>>> strong password, which is kept on a safe place, and grant the
>>>> accounts only the needed rights. Maybe one time a year you can
>>>> reset the passwords if needed.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers
>>>> no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> A bunch of my servers that had domain login accounts set for
>>>>> services started losing thier permissions and i would have to go
>>>>> back open the service and hit ok and the service would start. This
>>>>> happens with any service that used a domain admin account
>>>>>
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.