Re: issue accessing an AD server

From: Steven L Umbach (n9rou_at_nscomcast.net)
Date: 06/15/04 

Date: Tue, 15 Jun 2004 19:38:22 GMT

You can reset local security settings to default defined levels as described
in the link below. However on a domain controller, Domain Controller
Security Policy will override user rights assignments. The second link shows
how to restore Domain Controller Security Policy user rights to default or
otherwise modify it.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://support.microsoft.com/?kbid=267553

Having said that, I think your problem is not with security policy, but
probably due to the fact that your computer accounts may have been corrupted
or the comuter passwords on the backup have expired. I would first install
the support tools on your domain controller and a domain member from the
install disk under support/tools where you will need to run setup or the
.msi package there. The run first netdiag and then dcdiag on your domain
controller looking for failed tests/fatal errors particularly in regards to
dns, domain membership, dclist, and trust relationship. If all looks well
for the dc, run netdiag on a domain member that is experiencing problems
looking for the same. You may simply need to rejoing the computers to the
domain or otherwise try to reset their accounts using netdom which may be
easier but does not always work. If you find a lot of problems with the dc,
look in Event Viewer for event ID error numbers and search the Knowledge
Base or http://eventid.net for what you find. --- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B216393

"ScottS" <SSalvatore@lbmca.com> wrote in message
news:#P2PBNwUEHA.712@TK2MSFTNGP11.phx.gbl...
> Hi
>
> I have an issue accessing an AD server; do to hardware failure I needed to
> restore the server from tape. Veritas BE was unable to restore the sysvol
> share point, but it did restore the files and folders. I created the share
> and right however as an end user I cannot logon to the server. When I
browse
> the network places to the server I cannot access the server. I receive the
> error Logon failure: the target account name is incorrect. This happens as
> the admin as well.
>
>
>
> I feel it could be a permission issue. Can anyone tell me how to reset the
> security permission on an AD server? I want to set them to the same level
as
> it would be after you promote the server to an AD I know its doable I jus
> went brain dead on the syntax.
>
>
>
> I posted this in the
>
>
>
> Thanks
>
> Scott
>
>

Relevant Pages

  • Domain Controller Security Policy errors
    ... Security Policy or the Domain Controller Security Policy. ... The DC is also a print and file server. ... The domain controller for Group Policy operations is not available. ...
    (microsoft.public.win2000.active_directory)
  • Re: Local policy does not allow interactive login
    ... I am not sure what the exact problem is but if the server you took offline was a ... you are in native mode as shown in Active Directory Users and Computers. ... fsmo domain controller as their preferred dns server in tcp/ip properties as shown by ... The fact that you can not access Domain Security Policy may be due to the fact that ...
    (microsoft.public.win2000.group_policy)
  • Re: oops there goes my Domain controller
    ... There is no need to know the "local" admin password, on a DC it is the administrator password for "Active directory restore mode" which can be reset with "Setpwd" in 2000: ... wc.com from domain controller wespac to domain controller wddc01: ... numerous things can contribute to this from DNS ... Server) Service being disabled, using your ISP's DNS, your router as ...
    (microsoft.public.windows.server.active_directory)
  • Re: logon from the server machine !
    ... The default Domain Controller policy in Windows Server 2003 does not allow ... Security Policy setting. ... Policies/User Rights Assignment - and add the user to the Allow Local Logon ...
    (microsoft.public.windows.server.general)
  • Re: mapped share on student session timing out
    ... If it is a domain controller open Domain Controller Security Policy and if ... it is not a domain controller open Local Security Policy on the server via ...
    (microsoft.public.windows.server.security)