F-SECURE POLICY MANAGER 9.0, Руководство администратора

Страница: 85 / 102

Answer Question
The Domain Controller server and Member/Standalone
server use different types of accounts: domain How can the server role change stop Policy Manager
Server from working?
accounts on Domain Controller and local accounts on
Member server. Because Policy Manager Server uses
its own account to run, this account becomes invalid
with the role change.
The easiest way to restore Policy Manager Server
after a server role change is to re-install Policy
Manager Server with the
Keep existing settings
option selected. This will recreate the Policy Manager
Server account and reset all file access rights to the
correct ones.
Note: If you have moved the
commdir
manually
to a new location, you might need to re-add full
control for the new account in that directory tree.
Access rights restrictions, especially restrictions under
the
%SystemRoot%
directory (
c:\windows
or
How can Windows security hardening stop Policy
Manager Server from working?
c:\winnt
) can stop Policy Manager Server from
starting, as its own account (Local Service) needs to
be able to read the network related DLL and SYS files.
You must allow the Local Service account to 'read' the
following directories:
%SystemRoot%
%SystemRoot%\system32
%SystemRoot%\system32\drivers
Some service restrictions can also prevent the Policy
Manager Server service from starting. For more
information on these please consult the Microsoft
Windows Server documentation.
If you are getting the
Unable to connect to
management server. Another administrator
Why am I unable to connect to Policy Manager Server?
may be logged on
error, check that nobody else
is logged in to Policy Manager Server with Policy
Manager Console. This error might also be caused by
an unclean shutdown of Policy Manager Console. To
fix the situation you can either wait for Policy Manager
Server to timeout (<=5 minutes) or delete the file
admin.lck
file under the
commdir
and restart the
Policy Manager Server service.
If Policy Manager Console is run on a separate
computer from Policy Manager Server, then the Why does Policy Manager Console lose the connection
to Policy Manager Server?
connection may be affected by network problems.
There have been numerous reports where, for
example, a network switch change caused
loss-of-connection problems between Policy Manager
Console and Policy Manager Server. Usually these
F-Secure Policy Manager | Troubleshooting | 85