BaDaB00M

Has anybody worked with the Winstall lite that comes on the Win2k Server CD? I get it to work for some applications but not others. It's weird because it is some of the more simple programs that are causing problems. I just decided to do a test with some simple freeware, like trillian. Everything is fine until Windows Installer tries to install it. (2000 domain, WinXP client) I get errors like these: Error 1406. Could not write value VersionMinor to key UNKNOWN\Products\4D2506DAF3AD3C347A284BB1178E618C\InstallProperties Verify that you have sufficient access to that key, or contact your support personnel. and Error 1406. Could not write value VersionMinor to key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AD6052D4-DA3F-43C3-A782-B41B71E816C8}. Verify that you have sufficient access to that key, or contact your support personnel. I am logged on as administrator when this happens, though it is supposed to work for any user. This is just an example of the of errors that I am getting with it for a few different programs though they all look very similar. I looked around on MS technet site, but didn't help much. I don't understand why I would get this from such simple install programs. I just need pointed in the right direction, or how to interpret these errors. It must be something wrong with the snapshot because I can click ignore and the program finishes its install and works fine afterwards. However, I cannot assign it to a machine if it has errors in it so I still have to figure out how to fix the install... Tried editing the .msi file to see if I could take out any registry keys that are unrelated to the program. Unfortunately that didn't fix it. Didn't see anything obvious. Any help is greatly appreciated. ;(

You rock, DS3Circuit! I found my answer on that site. That is a great site, going in my favorites. I've been searching microsoft, veritas, and google for this problem off and on for over a week. All that and it was something so stupid. The problem was that you can't use a letter in the application version when you edit the .msi file. I was putting 0.74c on trillian and every other program that was having this same problem also had a letter in the version. I guess it puts the version you give it in a key in the registry that can only accept numerical data. ;( I feel so dumb now, cuz the error makes sense now. They could have made it a little less cryptic though. Did I mention you rock? Thanks.

I have a Win2k DC that I am putting in a remote VPN site. Now, when I have the DC at the main site, it can access the security policy just fine. However, when I take it to the remote site, it can't access it. I thought all DCs were supposed to have it's own copy of this? Shouldn't it be able to use it's own copy until it makes the VPN connection? I try to make the VPN connection and it says it can't because it doesn't have access to the security policy. Ironically if it would connect, it could then access the security policy. How do I get it to access the security policy when it can't communicate with the other DCs? Here is the error I get on connecting to the VPN: Event ID: 20111 A Demand Dial connection to the remote interface <VPN SITE> on port VPN2-4 was successfully initiated but failed to complete successfully because of the following error: The L2TP connection attempt failed because security policy for the connection was not found.

I have an Enterprise Certificate Server installed and I was following this article: http://support.microsoft.com/default.aspx?scid=kb;en-us;253498 to install an IPsec certificate. I get to step #5 under "Installing a Local Computer Certificate from an Enterprise Windows 2000 Certificate Authority" and then it has a "pop-under" window that says "Downloading Active X control..." but it just stays like that and never finishes. I let it sit for days even because I was working on other things. Is there some control that has to be installed? I hope I doing the right thing... It's to try and setup a site to site VPN using L2TP/IPsec. I need to install the certificate and then I can setup the Routing and Remote Access as I understand it. Thanks for the help.

I figured it out... apparently if the client has this patch on it then the server must also have this patch or it gets stuck when it tries to download the active X control. Here is the link to the patch: http://support.microsoft.com/default.aspx?scid=kb;en-us;323172

Ok, I have been working on this for a while but haven't found anything about it. My goal was to use Active Directory Integrated DNS. I have a Forest Root Domain Controller with DNS on it and a Child Domain Controller (New Tree) also with DNS on it. I found some conflicting information on how to install this as there are articles that say to only point the DNS server to itself for the DNS IP properties. Well, if you do that then you can't promote the child to a domain controller unless you have DNS server already setup with the proper zone info. So what I did was installed DNS as standard primary for the zone of the Forest Root on the Forest Root server and DNS standard secondary on the Child server. For the Child Tree zone I setup the zone as standard primary on the Child server and standard secondary on the Root Server. I then made sure both were listed in the name servers tab in DNS properties on both server and enabled zone transfers to only those on the name servers list (also enabled notify to those listed). Then I promoted them to domain controllers (obviously root first) and the DNS zone information was properly transfered to eachother. I had everything replicating and working correctly at this point with no event log errors. At this point I figured it would be ok to change the DNS zones to Active Directory Integrated, so I did so and also had no errors. Problem is that when I add a host entry on one server, it never adds it to the other server. I can force replication and never get any errors what so ever, but it for some reason just decides to ignore that little part about replicating DNS. I've tried it with Secure Updates Only and also without requiring secure updates; still doesn't work. Anyone know why? Maybe I installed it totally wrong but it didn't seem to work any other way.... had many a times where replication didn't work at all, even using the default dcpromo stuff. Seems Microsoft documentation on a new tree with a different DNS name is lacking. I also noticed something else strange, though not sure if this has anything to do with it. Each server changes the Start of Authority entry to itself for every zone, no matter what I put in for it. I figured that the Start of Authority for my Root Domain should be the Root Domain Controller and the Start of the Authority for the Child Tree should be that domain controller. I go in and manually change it on each server, but as soon as I exit and go back to it, each server says it is the Start of Authority for both zones. Please tell me what I'm doing wrong....

I just double checked the hosts and lmhosts file. I haven't changed anything for these as it has the standard localhost entry and there is no lmhosts file. This is very strange... I just can't believe that there is nothing in the event log about it.... it just doesn't replicate the data. I appreciate the help!

First - Good to know... so no problem there. Second - Yes, I absolutely have both servers listed in the name servers tab and I have the allow zone transfers with only with those servers listed in the named servers selected. (on both servers) Also I remembered the serial numbers were way off, but then I just checked and some of them are and some aren't now. I have 3 zones: Forest Root Zone - 7 off, Child Tree Zone - 1 off, Reverse Lookup Zone - 112 off. Though none of the changes has been passed on. Third - Ok, so no problem there either. Now I guess there is only one problem then.... the DNS entries aren't getting replicated. I am a little confused on the method that is supposed to be used. Should I even need zone transfers? I thought if it is active directory integrated, then it should be replicated with the active directory. Not sure about that.... so I did the zone transfers anyway. BTW, these DCs both have SP3. Does that help to figure out why the DNS info isn't replicating? Thanks.