Re: How many ways can you log on to a DC?

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/24/04


Date: Mon, 24 May 2004 12:12:44 GMT

If you still have access to logon to your domain controller by normal means I think
you can change that password by booting into directory services restore mode which
will allow access to that administrator account via local users and groups and let
you change it. Be sure to test it out as I am not 100 percent sure about that.
Otherwise you will need to use one of the password reset disks on the domain
controller to reset that administrator password which is stored in the local sam
[another reason physical security is so important for domain controllers] . The link
below explains more. --- Steve

http://support.microsoft.com/?id=239803

"Martin" <anonymous@discussions.microsoft.com> wrote in message
news:112e801c44158$911f6da0$a501280a@phx.gbl...
> How many ways can you log in to a domain controller?
> As far as I have understood it:
> 1. With an active directory account with enough
> permissions.
> 2. With a local account when performing active directory
> restore. (It's stored in the local SAM file)
>
> Im asking since I might have to do a active directory
> restore and the password is not documented. I have the
> password for the built in account Administrator in active
> directory but Im not sure thats the one I need when
> performing a restore of AD.
>
> Any comments or suggestions are more than welcome.



Relevant Pages

  • Re: Disaster Recovery - Virtualized environment
    ... Starting an Active Directory domain controller whose operating system resides in a virtualized hosting environment such as Microsoft Virtual PC, ... Starting an Active Directory domain controller that is located on a volume where the disk subsystem loads using previously saved images of the operating system without requiring a system state restoration of Active Directory. ... The only supported way to roll back the contents of Active Directory or the local state of an Active Directory domain controller is to use an Active Directory-aware backup and restoration utility to restore a system state backup that originated from the same operating system installation and the same physical or virtual computer that is being restored. ...
    (microsoft.public.windows.server.active_directory)
  • Re: DC promo wnoT happen
    ... RESTORE FROM BACKUP ... If you cannot restart a domain controller in Directory Services Restore ... Verify Active Directory restore. ...
    (microsoft.public.win2000.active_directory)
  • Re: Disaster Recovery
    ... You can have rescue domain controller within a rescue site (To prevent ... Windows Server 2003 Active Directory Fast Recovery with Volume Shadow Copy ... Describes how to restore Active Directory data on a doman controller. ... This article describes how to perform a disaster recovery restoration of the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Object Owner
    ... if just i could afford a domain controller whos hdd i never need to ... > Second is there any way of creating a backup of the local SAM for when I ... > reformat and restore it? ... with a restore of the boot partition and installed apps. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Disaster recovey
    ... I had taken active directory systemstate backup using VERITAS, ... Is it possible to restore it into my test lab, ... > Here is few good resources I use when I planning disaster recovery, ... > Restoring a domain controller ...
    (microsoft.public.windows.server.active_directory)

Quantcast