Re: Locked out of Win2k Server

From: Herb Martin (news_at_LearnQuick.com)
Date: 02/11/05 

Date: Fri, 11 Feb 2005 09:31:35 -0600

If you could not logon to both the domain and
the machine accounts then it is likely that you
were under attack.

Either a trojan/virus or someone in your organization
may be messing with the passwords.

Had you not failed with THE Administrator then I
might have suggested your Security Log was full
(with registry settings to down the machine.) 

-- 
Herb Martin
"[-=Dan=-]" <getbent@ease.com> wrote in message
news:373v2tF55uh7jU1@individual.net...
> "[-=Dan=-]" <getbent@ease.com> wrote in message
> news:373u2cF587thdU1@individual.net...
> >
> > "Don Wilwol" <wilwol@capital.net> wrote in message
> > news:OWd$WTEEFHA.1496@TK2MSFTNGP14.phx.gbl...
> >> I'm not sure I fully understand. You can not log onto the domain from
> >> anywhere, or just from the one server. If you can get to the policy,
you
> >> should be able to undo your mistake. If you can log on from anywhere, I
> >> had a colleague that had a customer do the same thing. I found this
hack
> >> for him. We never got to try it, they wound up restoring AD from
backup,
> >> but if its the last hope!
> >> http://www.commodore.ca/windows/undo_group_policy.htm
> >>
> > Hi Don,
> >
> > thanks for your reply, sorry If my message was confusing. Basically, we
> > can forget the domain completely here. I can't even log on to the
machine
> > locally. It's here right in front of me, and I can't login as
> > administrator to the machine itself, let alone the domain!
> >
> > Dan
> >
>
> Ah feck it, it's being rebuilt. Thanks for your help.
>
> Dan
>
>

Relevant Pages

  • Re: Problems running treeview
    ... "Dan Tallent" wrote: ... > Hi Anne Marie, ... > I found these in the merge file that comes with installshield. ... >> problems are occuring while the customer is logged as Administrator, ...
    (microsoft.public.fox.programmer.exchange)
  • Re: Stop having to do the authentication check in OS X?
    ... Not if he has an admin account with no password, it isn't secure. ... the contents of the old administrator home folders contents to the new ... In other words can an attack happen no ...
    (comp.sys.mac.system)
  • Re: Newbie administrator - HELP wanted - Network printing problem
    ... "Dan E" wrote in message ... > Hi All - HELP wanted for a Newbie administrator - me! ... > the permissions or whatever that needs changing. ... > temporary limited rights user, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Cache Timing attacks on AES : Replication or further Development?
    ... which IIRC were not complementary to Dan ... up his presentation and we now have an attack that actually works. ... > and prematurely discounted Dan Bernstein's attack. ... skill or the attack doesn't actually work in practice because the S/N ...
    (sci.crypt)
  • Re: Process running under Adminstrator account
    ... an attack on the RWW port of SBS. ... Under that condition, if an attack took place from the WAN, would not ... obscuring the administrator account by a name change ...
    (microsoft.public.windows.server.sbs)
Quantcast