Re: Cannot login to DC



I don't know how the server got to this state (nor does anyone at this
sight). I have been asked if I can fix it. I had hoped that I could simply
uninstall the AD and then reinstall. It has been being able to login that
keeps tripping me up. The amount of down time necessary to reinstall is
available, but would be tight. So ... I am trying to see if there are other
options first.


"Herb Martin" wrote:

> "David Langschied" <DavidLangschied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
> message news:E5C73FFC-4114-4C27-8790-65F8C733C7B4@xxxxxxxxxxxxxxxx
> > "Herb Martin" wrote:
> >
> >> "David Langschied" <DavidLangschied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
> >> message news:CF1A7226-43BD-4BB1-A84E-FC39EBA26F77@xxxxxxxxxxxxxxxx
> >> >I have a DC that I cannot access. I am not sure what exactly happened,
> >> >but
> >> >I
> >> > now get a message at login that indicates that interactive logins are
> >> > not
> >> > allowed. The server is running fine, so I am relunctant to anything
> >> > rash
> >> > right now. I can login in safe mode using the directory rebuild for
> >> > DCs.
> >>
> >> Notice that this is NOT really the same as safe mode:
> >> Directory Service Restore mode uses a "local" admin
> >> account that is NOT in AD, but equivalent to a server
> >> specific user like on a non-DC.
> >>
> >> Are you using THE Administrator account for the domain
> >> on the normal login (it shouldn't really be better than any
> >> other admin account but do take that variable out of the
> >> equation.)
> >>
> > Yes, I am logging in as administrator.
>
> It would be clearer if you would say THE Administrator (with or
> without the capitalization.) Or more specifically failing to logon
> as the adminster of the domain, but succeeding with the DS restore
> (local) administrator account.
>
> >> Can you logon in any other (true) Safe mode, especially
> >> Safe Mode with Networking?
> >>
> > I tried straight Safe Mode and could not login.
> >> > I am curious if I can:
> >> > reinstall AD and, subsequently, set this server backup as a DC.
>
> I took this to mean re-install the DC since you cannot logon
> to the DC, you cannot MERELY DCPromo to non-DC.
>
> >> Well, sure, but that loses the DC/server; this is always possible
> >> but usually not desirable.
> > All I want to do is to be able to login to the server and not the domain.
> > This server has SQL and some Dbs on it. It really did not need to be a
> > DC.
>
> The problem is getting you a place to do the DCPromo.
>
> I think I might try a REPAIR INSTALL.
>
> Can you access this machine with any REMOTE tools?
>
> e.g., AD Users and Computers with THIS server specified?
> Or any other remote MMC connection to it?
>
> >> > uninstall and add the server to another domain (with an NT ?).
> >> > simply add the server to the other domain.
> >>
> >> As long as it is not a DC you can certainly do this.
> > Can I do this to get a login, even with the DC loaded?
>
> That's the issue. You first need to logon to it.
>
> What had you done to it, or Group Policy etc., prior to this
> problem?
>
>
> --
> Herb Martin, MCSE, MVP
> Accelerated MCSE
> http://www.LearnQuick.Com
> [phone number on web site]
>
>
>
.



Relevant Pages

  • Re: Unknown Domain user - domain authentication appears limited
    ... (using cached login). ... Microsoft MVP (Windows Server System: Security) ... > due to the following error: Logon failure: the user has not been granted ...
    (microsoft.public.windows.server.security)
  • Re: Domain Administrator cannot logon to SBS 2003 LOCALLY
    ... login are involved. ... I have concern when you mentioned Veritas Backup. ... It is a SBS Server ... > 'The user has not been granted the requested logon type at this machine'! ...
    (microsoft.public.security)
  • gdm hangs
    ... gdm will hang 9 of 10 times when logging out. ... with or without the client having been connected to the Server. ... # Timed login, useful for kiosks. ... Must output the chosen host on stdout, ...
    (Debian-User)
  • RE: OWA 2003 with ISA 2004
    ... OWA externally. ... i can login by any user. ... 825763 How to configure Internet access in Windows Small Business Server ... g. Reproduce this issue and send the logs to me. ...
    (microsoft.public.windows.server.sbs)
  • Re: Compromised Server? Anyone recognize the suspect Services?
    ... there are a bunch of logins for Website Accounts created by the ... The login accounts are for web sites that are on the ... Server management is ... right under Network Connections there were 3 ...
    (microsoft.public.windows.server.networking)