Printable View
I just ran C2config.exe from the NT4 reskit on a NT4 sp6 server. However, it seems c2config.exe doesn't like international flavours (it was a french NT4 install). Now my administrators (or rather "administrateurs" which seems to be at the root of the problem) don't have any access to C: all NTFS permissions on C: have been changed. And I can't even view permissions and even less retake ownership... :eek:
Any ideas?!?...
NO REALLY!! ANY IDEAS!! :confused:
PLEASE!! :(
Ammo
Got a backup?
More details:
Here's what I found from MicroShit (sorry, getting emotional)...:
http://support.microsoft.com/default...;EN-US;q172185
Miraculously, I had a usrmgr window open when I ran C2config, so I was able to create a Administrator user and Administrators group, and give all user rights like my administrateurs group but to no avail...
Now all users are able to login, and all user files were on d:, so things are still running "fine" for *them* for now...
Administrative shares don't work from other workstations either...
help!!
PS: If you read the MS page I linked, it says to try the ERD... of course I can'T find it... (I'm not the one who built the box, but I should have checked, I know...)
"Got backup" -> *sorta*....
Anyways, updates:
For some reason, after renaming the account "administrator" I created to "Administrator" (with a capital A), I seem to be getting some results... I can now browse shares mapped to d: that were restricted to admins with ntfs permissions...
I can also browse user rights with "DumpSec"...
Still can't access c: locally or admin shares remotely though...
I'll keep you posted...
Ammo
Anyone know of a way of running something as System user?
I badly need a way of restoring my C: drive's NTFS permissions...
I can't even logon localy now..
Ammo
What you could do is use a program like Partition Magic to convert your NTFS partition to FAT32. You'd lose all your NTFS specific information though, but at least you'll be able to access your C:. You could then convert it back to NTFS and set it all up. Another option would be to attach your drive as a slave on a WinNT/2K/XP machine that you have admin rights to and then take it from there. Hope this helps.
Cheers,
cgkanchi
Actually, I have an idea, i don't know if it would work but you could try it, got a spare hardrive around? put like redhat hat on it put in your nt box and set up the linux harddrive so that your able to see the windows (enable windows connectivity) and you'll be able to boot to linux and mount the box and you will be able to see add modify all the data without actually killing any of it....
Like i said this im not sure if this will work but good luck.
Redhat does not linux NTFS too well. only Fat filesystems.
Along the same lines as linuxcomando find another harddrive and put NT4 or 2000 on it and set it up to boot. Go to the properties of the second drive(origional NT4 drive) and take owner ship of every directory in the drive. This has worked for me when my XP install blew up and I needed to get my files off.
I was going to say slackware or something else but the only box i set up with that kind of setup was a redhat box.......i haven't had too many problems......yet...;) after all it in the same box as a NTFS harddrive :)
But hey....for being such an anti-microsoft person that i am he should be lucky that im not flaming him for running microsoft.
;) j/k
Right.. I knew about this option, but since it's a important file server, I can't try any of those like before the weekend....
The ironi in all of this is that my users don't have a clue this is going on... all their files are on d: with permissions intact... Acutally, right now it's like... TOO secure...
Ammo
i can't help too much.. but it seems like permission problem to me =/
I did it! I got my server back! ;)
I had to "hack" myself and it worked nicely! (feels great!):
My admin account still worked, its just that ntfs permissions on c: and c:\winnt\* and c:\winnt\system32 were set to "system: full control" only.
So here's how I did it (actually pretty classic win hack):
connected to \\server\c$,
had no access at the root but some dirs' ntfs perms were still good (and besides I d: was still ok),
uploaded netcat,
tried to run a netcat server piped to cmd.exe with "soon", but it wouldn't run right, so...
ran a reverse netcat: ran a server on my comp and a piped netcat client on the server (still with the "soon" command)...
bingo!: had a command prompt running in SYSTEM context!
finally simply restored acls with xcacls!
Feels good!
Ammo
That's the same problem as having a NT disk that doens't boot ...
What you can do?
A.
You can create a "clean" NT installation on another hard disk, then install the disk with your information. This way you can read all your files. Or if you have a "spare server" you can install the disk there.
Disadvantages:
a. You lost the installed software (i.e., you need to reinstall all server applications).
b. You lost the drivers for specific hardware you may have, so you will need the original disks or download them if possible from the net.
c. You need to recreate all your security structure : user accounts, permissions, shares, etc.
B.
You can use a Linux machine for the same purpose, making sure your linux box can read NTSF.
Disadvantages: same as above.
C. You can use Partition Magic to convert your partition to FAT32.
Disadvantages: same as above.
So whatever you decide, is a painfull decision... sorry. :(