Windows 7 Startup Repair Disjoining System From Domain
Hello,
We have had this issue since deploying Server 2008 on our DC's, and Deploying Windows 7 on our clients. It started off, when the user would hold the power button down and improperly shut off the client; then upon reboot startup repair would launch
and ask the user if they would like to restore (They always click yes) then the client would be restored to the first time I installed windows when creating the base image.
I have since disabled Startup Repair via a registry edit in Group Policy. However, somehow I am still receiving support calls that the trust relationship had been broken ect..ect.. or they simply get an Administrator login. When I login as
local admin on the one that says the trust relationship has been broken, it still shows that it is joined to the domain; however the one that simply gives an administrator login shows it belongs to a workgroup.
I can't seem to find an reason why this is happening, and how to solve it. Does anyone have an idea why this happens?
November 24th, 2010 6:46pm
Please see the answer of this thread.
The trust relationship between this workstation and the primary domain failed.
The reason should be:
1. Computers are security principals just like users
2. Computers authenticate to the domain on startup
3. Computers change their password every 30 days by default
4. Restore Points restore the computer password present at the time of the restore point
5. If the local password and the domain password are not the same the computer must re-join the domain
6. None of these things seem to be the issue here.
Arthur Xie
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 25th, 2010 9:44am
Hi,
Just want to confirm if you have got the issue resolved.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 29th, 2010 5:55am
No,
And I don't think that a vista fix has anything to do with my issue. I'll wait to hear from tech support on this. I just opened up a ticket on this.
Free Windows Admin Tool Kit Click here and download it now
December 22nd, 2010 12:04am
Hello Jeff,
Were you able to resolve this issue? The same thing is happening to computers in my domain.
February 23rd, 2011 2:22am
ryanez,
Yes we did resolve this issue after working with M$ tech support.
You need to run this command on the computers in your domain: C:\Windows\System32\REAgentc.exe /disable
This will totally disable the startup repair, and prevent users from using system restore. I wrote a .vbs script to run the command, and then output the computer names that it ran on to an excel file, so I knew what computers the script had run on.
Hope this helps,
Jeff
Free Windows Admin Tool Kit Click here and download it now
March 7th, 2011 5:39pm
Hi Jeff
Thanks for updating your post with the fix, it's something we have recently bumped into, will package up that and deploy today.
David.
March 10th, 2011 6:19pm
We also came across this.
Do you have your VBS script, not a scipter :-)
Please and thanks
Derek
Free Windows Admin Tool Kit Click here and download it now
March 21st, 2011 5:59pm
Derek,
Sorry, I haven't been watching this thread. Yea here's the script.
'Declare Variables
Dim strExcelPath
Dim strApp
Dim arrPath
Dim strPath
Dim strAppPath
strExcelPath = "\\path to save excel file to"
Dim strComputerName
strComputerName = "%COMPUTERNAME%"
' main if statement to run the script and call functions and sub's
If (CheckRegistryForValue)= True Then
WScript.Quit (0)
Else
RunCommand
getComputerName
WriteRegkey
writeExcel
WScript.Quit (0)
End If
'Sub to run the REAgent disable command
Sub RunCommand
Set objShell = CreateObject("Wscript.Shell")
strApp = "C:\Windows\System32\REAgentc.exe /disable"
arrPath = Split(strApp, "\")
For i = 0 To Ubound(arrPath) - 1
strAppPath = strAppPath & arrPath(i) & "\"
Next
objShell.CurrentDirectory = strAppPath
objShell.Run(strApp)
End Sub
'Function to check registry for value, Return check registry for value
Function CheckRegistryForValue
Set WshShell = WScript.CreateObject("WScript.Shell")
On Error Resume Next
dong = wshShell.RegRead ("HKLM\SOFTWARE\REAgent\")
If (Err.Number <> 0) Then
CheckRegistryForValue = False
Else
CheckRegistryForValue = True
End If
End Function
'sub to Get computer name
Sub getComputerName
Set wshShell = WScript.CreateObject( "WScript.Shell" )
strComputerName = wshShell.ExpandEnvironmentStrings( "%COMPUTERNAME%" )
Set objExcel = CreateObject("Excel.Application")
End Sub
' sub to write registery key to flag computers that the script has run On
Sub WriteRegkey
HKEY_LOCAL_MACHINE = &H80000002
strComputer = "."
Set ObjRegistry = _
GetObject("winmgmts:{impersonationLevel = impersonate}!\\" _
& strComputer & "\root\default:StdRegProv")
strPath = "SOFTWARE\REAgent\Script Complete"
Return = objRegistry.CreateKey(HKEY_LOCAL_MACHINE, strPath)
End Sub
'sub to Get cmoputer name write output to excel to a file share
Sub writeExcel
Set objExcel = CreateObject("Excel.Application")
Set objWorkbook = objExcel.Workbooks.Open(strExcelPath)
Set objSheet = objExcel.ActiveWorkbook.Worksheets(1)
intRow = 2
Do Until objExcel.Cells(intRow,1).Value = ""
intRow = intRow + 1
Loop
objSheet.Cells(intRow, 1).Value = strComputerName
objExcel.ActiveWorkbook.Save
objExcel.quit
End Sub
October 12th, 2011 9:29am