Re: Cannot login to DC

"David Langschied" <DavidLangschied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:DCB6310D-3147-40E3-A08B-35CFF878CC91@xxxxxxxxxxxxxxxx
>I don't know how the server got to this state (nor does anyone at this
> sight). I have been asked if I can fix it. I had hoped that I could
> simply
> uninstall the AD and then reinstall. It has been being able to login that
> keeps tripping me up. The amount of down time necessary to reinstall is
> available, but would be tight. So ... I am trying to see if there are
> other
> options first.
>

I always try a REPAIR install before an (unnecessary)
re-install.

Original CDROM--> Install --> choose same directory, AND

Make sure you are OFFERED and SELECT the option to
REPAIR rather than do a "new install."

Since you don't know "how it happened" you must include
virus, trojan, sabatage, damege disk drives, bad upgrades,
or other trashing of the DC, in your thinking about what to
do and how to fix it.

Viruses are actually much rarer than most people think IF
you take good care of your machines but when the machine
has a dubious history all bets are off.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

>
> "Herb Martin" wrote:
>
>> "David Langschied" <DavidLangschied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
>> message news:E5C73FFC-4114-4C27-8790-65F8C733C7B4@xxxxxxxxxxxxxxxx
>> > "Herb Martin" wrote:
>> >
>> >> "David Langschied" <DavidLangschied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
>> >> in
>> >> message news:CF1A7226-43BD-4BB1-A84E-FC39EBA26F77@xxxxxxxxxxxxxxxx
>> >> >I have a DC that I cannot access. I am not sure what exactly
>> >> >happened,
>> >> >but
>> >> >I
>> >> > now get a message at login that indicates that interactive logins
>> >> > are
>> >> > not
>> >> > allowed. The server is running fine, so I am relunctant to anything
>> >> > rash
>> >> > right now. I can login in safe mode using the directory rebuild for
>> >> > DCs.
>> >>
>> >> Notice that this is NOT really the same as safe mode:
>> >> Directory Service Restore mode uses a "local" admin
>> >> account that is NOT in AD, but equivalent to a server
>> >> specific user like on a non-DC.
>> >>
>> >> Are you using THE Administrator account for the domain
>> >> on the normal login (it shouldn't really be better than any
>> >> other admin account but do take that variable out of the
>> >> equation.)
>> >>
>> > Yes, I am logging in as administrator.
>>
>> It would be clearer if you would say THE Administrator (with or
>> without the capitalization.) Or more specifically failing to logon
>> as the adminster of the domain, but succeeding with the DS restore
>> (local) administrator account.
>>
>> >> Can you logon in any other (true) Safe mode, especially
>> >> Safe Mode with Networking?
>> >>
>> > I tried straight Safe Mode and could not login.
>> >> > I am curious if I can:
>> >> > reinstall AD and, subsequently, set this server backup as a DC.
>>
>> I took this to mean re-install the DC since you cannot logon
>> to the DC, you cannot MERELY DCPromo to non-DC.
>>
>> >> Well, sure, but that loses the DC/server; this is always possible
>> >> but usually not desirable.
>> > All I want to do is to be able to login to the server and not the
>> > domain.
>> > This server has SQL and some Dbs on it. It really did not need to be a
>> > DC.
>>
>> The problem is getting you a place to do the DCPromo.
>>
>> I think I might try a REPAIR INSTALL.
>>
>> Can you access this machine with any REMOTE tools?
>>
>> e.g., AD Users and Computers with THIS server specified?
>> Or any other remote MMC connection to it?
>>
>> >> > uninstall and add the server to another domain (with an NT ?).
>> >> > simply add the server to the other domain.
>> >>
>> >> As long as it is not a DC you can certainly do this.
>> > Can I do this to get a login, even with the DC loaded?
>>
>> That's the issue. You first need to logon to it.
>>
>> What had you done to it, or Group Policy etc., prior to this
>> problem?
>>
>>
>> --
>> Herb Martin, MCSE, MVP
>> Accelerated MCSE
>> http://www.LearnQuick.Com
>> [phone number on web site]
>>
>>
>>



.

Relevant Pages

  • Re: Domain Controller Stops Processing All Login Requests Randomly
    ... >> machines simultaneously that are Deep Freeze clients. ... the server exhibited the same behaviour. ... The wierd thing is that I was able to login to the DC ... >>> Accelerated MCSE ...
    (microsoft.public.windows.server.dns)
  • How to get rid of old domain name without impacting current AD?
    ... They used to have a WinNT server as their PDC named for example "abc.com" ... However, when user's login to their system, the domain listed is still ... When I'm looking at the user account in AD, ... Anyone have any idea how to fix this without impacting the user's login ...
    (microsoft.public.windows.server.active_directory)
  • Replicacion SQL con SQL CE
    ... don't know how to fix it ... replicator.DistributorLogin = LOGIN ... replicator.DistributorSecurityMode = SECURITYMODE ... replicator.Distributor = SERVER ...
    (microsoft.public.vstudio.development)
  • Re: SBS offline, can users still use our TS?
    ... people really couldn't do much as SBS runs a lot of stuff. ... terminal server - it wouldn't get past the login prompt. ... Is there anyway to fix that so you can still login to the terminal ...
    (microsoft.public.windows.server.sbs)
  • Only the Admin can login to our Win 2000 server
    ... equivalents can login to our Windows 2000 server. ... fix this? ...
    (microsoft.public.win2000.active_directory)