I've heard that this has happened to some people with earlier versions of
some tools.
If you really need to recover, do you have an ERD (or backup) and a test
box? If so, you might be able to recover the info by restoring to a test
box (with your ERD or other registry backup method). Then, export the info
in the HKLM\System\CurrentControlSet\Lanmanserver\Shares key and restore it
to your server that lost the share info.
Better yet, if you haven't rebooted since, the data may actually also still
be on your original server under
HKLM\System\ControlSet01\Lanmanserver\Shares. Anyway, make SURE to back up
your current shares key first and use regedt32 to do the export and import,
not regedit. The import will overwrite the entire key, so be careful if
you've added anything since. Stop and start the server service and you
should be back up and running. Any shares created by nimda will probably be
there as well, so you'll need to run some sort of tool again or remove them
by hand.
You can use these as a reference:
http://support.microsoft.com/support/kb/articles/Q125/9/96.asp
http://support.microsoft.com/support/kb/articles/Q141/5/89.asp
Good luck
-BM
> -----Original Message-----
> From: Willis Olivo [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, September 25, 2001 3:06 AM
> To: NT System Admin Issues
> Subject: Lost permissions
>
> Recently a fellow admin and I ran two virus fix tool on an NT4 Server
> after which time we lost all permissions on shares. The only permissions
> that remained were those of the administrator. Has anyone ever come
> across this problem?
>
> Thanks
> Want to unsub? Do that here:
> http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmin&text_m
> ode=0&lang=english
>
Want to unsub? Do that here:
http://lyris.sunbelt-software.com/scripts/lyris.pl?enter=ntsysadmin&text_mode=0&lang=english
