Hi!
I have tested migration win2003r2 active directory domain to win 2012r2. Everything works fine, until i promoted 2012 server as domain controller. First time server boot's up and server manager shows 1 error.. software protection service won't start because it cant ..says access denied. After one more restart, sever go crazy and shows up 6 services that won't start. software protection, dps, user access logging, dhcp client, ip helper and network location awerness. Does anybody knows why this happen????.. after i add network and local services to local admin group, everything works fine except dps..for dps to work i have to enter regedit and manually add permissions for service. My second question is.. is it safe for active directory controller to add all network and local services to localadmin group.. what about viruses, ransomware and other malicious software who can use that permission??.. please help ...if anyone knows something..
I have tested migration win2003r2 active directory domain to win 2012r2. Everything works fine, until i promoted 2012 server as domain controller. First time server boot's up and server manager shows 1 error.. software protection service won't start because it cant ..says access denied. After one more restart, sever go crazy and shows up 6 services that won't start. software protection, dps, user access logging, dhcp client, ip helper and network location awerness. Does anybody knows why this happen????.. after i add network and local services to local admin group, everything works fine except dps..for dps to work i have to enter regedit and manually add permissions for service. My second question is.. is it safe for active directory controller to add all network and local services to localadmin group.. what about viruses, ransomware and other malicious software who can use that permission??.. please help ...if anyone knows something..