Home / server / Questions / 402284
In Process
Andrew J. Brehm
Asked: 2012-06-27 02:04:33 +0800 CST

"Access denied" for administrator for everything

  • 772

We have a (rather old) Windows Server 2003 which since last week shows some odd behaviour.

It decided that all local administrators and local system are no longer allowed to do anything, including creating event triggers or killing tasks (except via Task Manager).

The problem goes away after a reboot.

What could cause such behaviour?

Update:

This also affects VBS scripts, like the clusweb.vbs script used to control IIS from Cluster Services.

This line:

set objWmiProvider = GetObject("winmgmts:/root/cimv2")

causes this error:

Generic Script <IIS>: Script Error: Line=50, Character = 4 
Generic Script <IIS>: Source: SWbemServicesEx 
Generic Script <IIS>: Description: Access denied 
Generic Script <IIS>: Error: 2147749891 (0x80041003) - Description: Access denied  (Source: SWbemServicesEx)

On a test server the line works, whether run by an administrator or non-administrator.

Update:

It appears the problem also causes cluster resources to become degraded and fail over. I experimented a bit with leaking memory in the nonpaged pool in a test system to see if I would get the same (catastrophic) results, but they are not quite the same (there is no "access denied" at any point, programs just don't start).

Any ideas what could cause all this?

windows-server-2003 permissions

1 Answers

  1. This sounds a lot like the downadup virus has infected your server. I had a very similar issue on a DC; once it was rebooted it worked fine. But after a short time, the server service (amoungst others) would stop and the server would become unusable.

    Would recommend the obvious scans/updates etc.

    Apologies for using the answer, but I can't add any comments yet...

    HTH, James

    • 0