windows 2003 SP1 network problem - Network Connections service fails to start

Hi all

Firstly, sorry for the crosspost but it's not purely a networking question
but does affect the network.

This is something we've been trying to find an answer to for a few days now.

We have five Windows 2k3 development machines which need to be on their own
domain as the development involves creating users in Active Directory. Now
our IT manager set up the domain as a subdomain of the main office domain
which up until now has worked fine.

However, SP1 installed itself last week (thanks to a network policy) and we
hit a major brick wall: on every machine on which SP1 is installed the
network connection breaks completely.

Symptoms...

1. The machine takes perhaps 15 minutes at "setting up network connections"
stage before you can log on
2. Opening up "Network Connections" in control panel produces a completely
empty folder (not even "add new").
3. Entries in the event log suggest something about the Network Connections
service not having appropriate security rights
4. Some services fail to start (but event log errors suggest that they're
probably related to the Network Connections service)
5. The network card is listed correctly in the Device Manager

Uninstalling SP1 returns the network to its normal state.

Note: this is _not_ the problem described in usenet passim regarding missing
icons (825826). Disabling the Windows Firewall service makes no difference.
Running scw makes no difference, neither does running sfc /scannow

The machines have various but disparate things installed: eg Sharepoint &
MCMS on one, SQL Server 2k on another... the only thing they have in common
over machines which have had SP1 installed with no problems is their
membership of the subdomain... is that likely to cause problems? I imagine
it's not something that many people will have tried!

Any suggestions would be appreciated.

Cheers!

Geoff

Check out this link-

http://www.microsoft.com/technet/pro.../overview.mspx

We had an issue where the services were locked down after the SP1
installation. We are still trying to test it before rolling out. There could
be some issue with the security configuration wizard......(not sure yet)

"Geoff Winkless" wrote:

> Hi all
>
> Firstly, sorry for the crosspost but it's not purely a networking question
> but does affect the network.
>
> This is something we've been trying to find an answer to for a few days now.
>
> We have five Windows 2k3 development machines which need to be on their own
> domain as the development involves creating users in Active Directory. Now
> our IT manager set up the domain as a subdomain of the main office domain
> which up until now has worked fine.
>
> However, SP1 installed itself last week (thanks to a network policy) and we
> hit a major brick wall: on every machine on which SP1 is installed the
> network connection breaks completely.
>
> Symptoms...
>
> 1. The machine takes perhaps 15 minutes at "setting up network connections"
> stage before you can log on
> 2. Opening up "Network Connections" in control panel produces a completely
> empty folder (not even "add new").
> 3. Entries in the event log suggest something about the Network Connections
> service not having appropriate security rights
> 4. Some services fail to start (but event log errors suggest that they're
> probably related to the Network Connections service)
> 5. The network card is listed correctly in the Device Manager
>
> Uninstalling SP1 returns the network to its normal state.
>
> Note: this is _not_ the problem described in usenet passim regarding missing
> icons (825826). Disabling the Windows Firewall service makes no difference.
> Running scw makes no difference, neither does running sfc /scannow
>
> The machines have various but disparate things installed: eg Sharepoint &
> MCMS on one, SQL Server 2k on another... the only thing they have in common
> over machines which have had SP1 installed with no problems is their
> membership of the subdomain... is that likely to cause problems? I imagine
> it's not something that many people will have tried!
>
> Any suggestions would be appreciated.
>
> Cheers!
>
> Geoff
>
>
>

<(E-Mail Removed)> wrote:
> Check out this link-
>
> http://www.microsoft.com/technet/pro.../overview.mspx

Maybe I'm being obtuse, but I'm not sure what you're getting at.

> We had an issue where the services were locked down after the SP1
> installation. We are still trying to test it before rolling out.
> There could be some issue with the security configuration
> wizard......(not sure yet)

Is this a quote from some article? If so it's not the one on that page.

Geoff

strange thing...
check out KB898060



"Geoff Winkless" <usenet-at-geoff-dot-dj@[127.0.0.1]> wrote in message
news:426f537d$0$293$(E-Mail Removed) t...
> <(E-Mail Removed)> wrote:
>> Check out this link-
>>
>> http://www.microsoft.com/technet/pro.../overview.mspx
>
> Maybe I'm being obtuse, but I'm not sure what you're getting at.
>
>> We had an issue where the services were locked down after the SP1
>> installation. We are still trying to test it before rolling out.
>> There could be some issue with the security configuration
>> wizard......(not sure yet)
>
> Is this a quote from some article? If so it's not the one on that page.
>
> Geoff
>

<(E-Mail Removed)> wrote:
> strange thing...
> check out KB898060

That article doesn't mention the network connections service, it's talking
about strange routing errors due to differing MTU settings.

To be clear, our problem is that the Network Connections service fails to
start.

Thanks for the input though.

Geoff

Check for "COM+ Event System" service is it in "pending state" (starting)?
If so then - your are not alone... I do have same problem on our company
Domain controller after SP1 installation.

I'm getting Microsoft assistance now but no good results yet.

"Geoff Winkless" wrote:

> <(E-Mail Removed)> wrote:
> > strange thing...
> > check out KB898060
>
> That article doesn't mention the network connections service, it's talking
> about strange routing errors due to differing MTU settings.
>
> To be clear, our problem is that the Network Connections service fails to
> start.
>
> Thanks for the input though.
>
> Geoff
>
>
>

Did you get a resolution yet? I am having a similar problem.


Roman Troshkov wrote:
> Check for "COM+ Event System" service is it in "pending state"
(starting)?
> If so then - your are not alone... I do have same problem on our
company
> Domain controller after SP1 installation.
>
> I'm getting Microsoft assistance now but no good results yet.
>

Hi,
yes! I have a solution for my issue.
Investigation showed that I had "Group Policy" settings “Impersonate a
client after authentication� set on Domain Controllers level and these
settings were incorrect.

As a result in “Local Policy� on problem domain controller I also had
“Impersonate a client after authentication� set wrong.

Check for resulting policy settings for "Impersonate a client after
authentication� in "User Rights Assignment".

It should include "service", "IIS_WPG", "Administrators" accounts.

Regards
Roman

"(E-Mail Removed)" wrote:

> Did you get a resolution yet? I am having a similar problem.
>
>
> Roman Troshkov wrote:
> > Check for "COM+ Event System" service is it in "pending state"
> (starting)?
> > If so then - your are not alone... I do have same problem on our
> company
> > Domain controller after SP1 installation.
> >
> > I'm getting Microsoft assistance now but no good results yet.
> >
>
>

<(E-Mail Removed)> wrote:
> Roman Troshkov wrote:
>> Check for "COM+ Event System" service is it in "pending state"
>> (starting)? If so then - your are not alone... I do have same
>> problem on our company Domain controller after SP1 installation.
>>
>> I'm getting Microsoft assistance now but no good results yet.

> Did you get a resolution yet? I am having a similar problem.

We've still had no resolution to this. I didn't see Roman's post but yes,
COM+ was also "starting".

We've uninstalled SP1 for now.

Geoff

Geoff did you ever get an answer from Microsoft, we are running into the same
problem?

"Geoff Winkless" wrote:

> Hi all
>
> Firstly, sorry for the crosspost but it's not purely a networking question
> but does affect the network.
>
> This is something we've been trying to find an answer to for a few days now.
>
> We have five Windows 2k3 development machines which need to be on their own
> domain as the development involves creating users in Active Directory. Now
> our IT manager set up the domain as a subdomain of the main office domain
> which up until now has worked fine.
>
> However, SP1 installed itself last week (thanks to a network policy) and we
> hit a major brick wall: on every machine on which SP1 is installed the
> network connection breaks completely.
>
> Symptoms...
>
> 1. The machine takes perhaps 15 minutes at "setting up network connections"
> stage before you can log on
> 2. Opening up "Network Connections" in control panel produces a completely
> empty folder (not even "add new").
> 3. Entries in the event log suggest something about the Network Connections
> service not having appropriate security rights
> 4. Some services fail to start (but event log errors suggest that they're
> probably related to the Network Connections service)
> 5. The network card is listed correctly in the Device Manager
>
> Uninstalling SP1 returns the network to its normal state.
>
> Note: this is _not_ the problem described in usenet passim regarding missing
> icons (825826). Disabling the Windows Firewall service makes no difference.
> Running scw makes no difference, neither does running sfc /scannow
>
> The machines have various but disparate things installed: eg Sharepoint &
> MCMS on one, SQL Server 2k on another... the only thing they have in common
> over machines which have had SP1 installed with no problems is their
> membership of the subdomain... is that likely to cause problems? I imagine
> it's not something that many people will have tried!
>
> Any suggestions would be appreciated.
>
> Cheers!
>
> Geoff
>
>
>