Re: I'm locked out of domain admin account on Windows 2000 Server!!!

From: x y (jamescagney90210@yahoo.com)
Date: 06/10/02


From: "x y" <jamescagney90210@yahoo.com>
Date: Sun, 9 Jun 2002 18:23:42 -0400


I'd be curious to know the error message you get when trying to log into the
server, can you ping the server, can you open up folders remotely on the
server, can you access other services on the server like DNS. Not sure
about XP, but Win 2000 client by default very unwisely hides the error
message if the domain controller cannot be contacted and you are being
logged in using a cached password, but there is a registry edit to change
that on 2000 and possibly on XP, documented at support.microsoft.com, I'd be
curious to know the result fo that as well.. and/or be curious to know if
you can log into a workstation using an account that has never logged into
that workstation before, to confirm that the domain controller really isn't
able to authenticate. You could download and try running the microsoft
domain diagnostic tools, think they are dcdiag and netdiag among others.
You could try booting up to directory services restore mode and restore the
last backup of the system state [I assume you're backing up system state
from time to time]. This is probably less helpful, but you could even try
running superscan port scanner from foundstone.com, who knows, maybe it will
tell you some port isn't listening as it should be.

"jeff and nicole" <bourman@bigpond.net.au> wrote in message
news:wNKM8.279018$o66.721759@news-server.bigpond.net.au...
I have a network with a Win2000 Server and 3x XP clients. After reebooting
the server we cannot login as domain admin or connect remotely as admin.
The domain admin account works fine on the client machines, but cannot logon
to server as anything to do admin tasks localy or remotely. I still have
full access to all the shares off the server from the client machines.

As far as I can tell RPC service has failed but how do I get in there to
restart it since I cant log in remotely or localy.

I'm absolutely stuffed.

Thanks in advance for your help :-)



Relevant Pages

  • Re: RRAS/NAT connected stations cant access websites
    ... Did you use the same model NIC on all the client machines? ... Download the Network Edition of MPS_Report tool from ... run it on the RRAS Server and client machine. ... |> the external DNS Server IP address provided by ISP to do the test. ...
    (microsoft.public.windows.server.networking)
  • rpc.lockd stalls
    ... All of the disk sits on the master Server, and all of the Client machines boot via Gig-E. ... when I find a file which appears to be one of the stalled locks, and I attempt to do anything with the file via a shell on the client machine, such as "cat" it, that shell will become unresponsive. ...
    (freebsd-questions)
  • Re: Im locked out of domain admin account on Windows 2000 Server!!!
    ... Good, i would also search support.microsoft.com for that error message, as ... Since you can access shares on the server, you could try running commands on ... > the server we cannot login as domain admin or connect remotely as admin. ... > full access to all the shares off the server from the client machines. ...
    (microsoft.public.win2000.security)
  • Re: roaming profiles
    ... now my final problem is that my client machines are trying to syncronise ... I'm thinking of running dcpromo and demoting the old server so that it ... your roaming profile attempting to log on with your local profile. ...
    (microsoft.public.windows.server.setup)
  • Re: troubles with nfslock
    ... NFS seems to work happily untill the moment I shut down one of the client machines. ... This is still not a big issue, the real trouble comes when I reboot the server. ...
    (comp.protocols.nfs)

Quantcast