MonitorWare Knowledge Base

This behavior can occur if you lock the system partition and remove the Everyone group from various locations.

To resolve the behavior, reset system default file permissions:

a. At a command prompt, type net share sysvol, and then press ENTER. Notice the path that is returned.
b. Right-click My Computer, and then click Properties.
c. On the Advanced tab, click Environment Variables.
d. In the System Variables section, click New.
e. In the Variable Name box, type Sysvol.
f. In the Variable Value box, type the path that you noted in step a without the last \sysvol item.
g. Repeat these steps to create the %DSDIT% variable and the %DSLOG% variable.

To view the path for these variables, examine these variables in the registry under the following key:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters .For example, the default location for the Database log files path and for the DSA Working Directory is the following:C:\WINNT\NTDS
• At a command prompt, run the following commands: cd \winnt\security\templates secedit /configure /cfg ""setup security.inf"" /db ss.sdb /log ss.log /verbose secedit /configure /cfg basicdc.inf /db basicdc.sdb /log basicdc.log /verbose
• Restart the computer."

This problem may occur if you have a damaged object. You may be able to see this object by dumping the Ntds.dit file by using LDP: 451667 187189 false 11 0 0 2002-01-17 10:37.32 - - - - - [GarbledCharacters] CNF:f956fe15-d932-4cc2-b15d-71bd07f8efca

This object is a damaged phantom object that results in ERROR_DS_DRA_INVALID_PARAMETER on the GC when the infrastructure master runs its phantom cleanup task every 24 hours.

To resolve this problem, obtain the latest service pack for Windows 2000.