Joined
·
114 Posts
removed all infected files, virusues dlls exes ect....
check the gpo and reg there is no disabled rights
sfc finished>reboot
even ran a script to edit the regitstry to clean up rights ( as per microsoft )
cd /d "%ProgramFiles%\Windows Resource Kits\Tools"
subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f
subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f
subinacl /subdirectories %windir%\*.* /grant=administrators=f /grant=system=f
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
reboot
from there checked all services, everything is running
masterbrowser, everything
however getting GPO errors
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 9/3/2008
Time: 3:48:32 PM
User: *******
Computer: *********
Description:
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1030
Date: 9/3/2008
Time: 3:46:38 PM
User: ********
Computer: *********
Description:
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1058
Date: 9/3/2008
Time: 3:46:38 PM
User: ********
Computer: ********
Description:
Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=***,DC=local. The file must be present at the location <\\***.local\sysvol\***.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Incorrect function. ). Group Policy processing aborted.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
HERE IS THE KICKER....
IF I MAP A DRIVE TO THE SERVER
O: \\server\share.... IT WORKS!!!!
Issue is that a application( accounting ) uses the UNC name to connect to the database on the server.... so of course if the computer cant resolve the unc the application also wont..
any help would be great!