Re: Where is the information regrading the domain controller store



are you saying you cannot login with the default administrator account?

on try the following...

boot the DC into SAFE MODE WITH NETWORKING

logon as the default domain administrator account....

open ADUC... and move the computer account back... reboot...


are you sure only thing that happened was that the computer account was
moved from the default domain controllers OU to the computers container?
anything else?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"David Langschied" <DavidLangschied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:1996954E-1A69-4CE6-B778-8EDA61ED5930@xxxxxxxxxxxxxxxx
I cannot login as it tells me that the group policy does not allow
interactive login. Another person told me of a tool that I could use that
was suppose to allow me to make sure that interactive rights were set, but
this program errored out.

The only way that I can login is to go into Directory Services Repair.
This
keeps me from doing alot of AD type stuff as it is not on any domain.

The server is a W2k.

If there is some way I could fix this without going through a repair or
reinstall that would be terrific.

I do have another machine that I can install W2k on. I was wondering if I
could make that a DC for the same domain and somehow copy the domain info
to
the problem machine. Does this sound doable?


"Jorge de Almeida Pinto [MVP]" wrote:

are you saying that by mistake the computer account of the DC was moved
from
the Domain Controllers OU to the Computers container?

what is the error you are seeing? OS?

you should for an example be able to logon to the DC with the default
administrator account, move the computer account back, open a command
prompt
windows and run GPUPDATE /FORCE (assuming we are talking about a w2k3
DC)
(if it is a w2k DC run SECEDIT /REFRESHPOLICY MACHINE_POLICY /ENFORCE and
SECEDIT /REFRESHPOLICY USER_POLICY /ENFORCE)

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"David Langschied" <DavidLangschied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:EFB4C466-9414-4F62-81D0-FDF51EC06085@xxxxxxxxxxxxxxxx
The domain controller server got moved from the domain folder to the
computer
folder. This has resulted in not being able to login interactively to
that
server. I was thinking that the easiest way would be to, some how,
access
the folder location and move it back.

Don't laugh!


"Jorge de Almeida Pinto [MVP]" wrote:

it would help a lot if you would tell what you want to achieve...

so...
what do you want to achieve?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
"David Langschied" <DavidLangschied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in
message news:EF497C5D-330D-472D-BBEE-4829226A03F1@xxxxxxxxxxxxxxxx
I was hopin' that there was some way to change something in there.

Is there anyway to modify the database?

"Joe Richards [MVP]" wrote:

What information? Do you mean the info for Active Directory itself?
If
so
that
is stored in NTDS.DIT, you won't have much luck looking at it
though,
it
isn't
like it is a clear text file, it is an ESE DB.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



David Langschied wrote:
I want to look at the above mentioned file. If I could find out
where
it is
located, I would greatly appreciate it.

Thanks!










.



Relevant Pages

  • Re: Where is the information regrading the domain controller store
    ... I cannot login as it tells me that the group policy does not allow ... The only way that I can login is to go into Directory Services Repair. ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... * This posting is provided "AS IS" with no warranties and confers no rights! ...
    (microsoft.public.win2000.active_directory)
  • Re: Limit User Access to One Login
    ... MVP Windows Server - Directory Services ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > (meaning one login allowed at a time). ...
    (microsoft.public.windows.server.active_directory)
  • Re: Access to XP Home PC
    ... Since doing so, I am faced with a login dialog upon reboot, with my username in the username box. ... I have to get some documents off the laptop quite urgently, and as I can't login, I'm quite stuck. ... the only way to log into the Administrator account of WinXP Home is to reboot into Safe Mode. ... For WinXP Pro, pressing CTRL+ALT+DEL twice at the Welcome Screen will produce the standard login dialog box. ...
    (microsoft.public.windowsxp.general)
  • Re: Workstation Locked out!
    ... the domain Administrator account, ... Have you tried to log in with the local Administrator account using a blank ... When you go to the ctrl+alt+del login screen on the workstation and click ... I tried to connect an old XP pro box to the network using the connect ...
    (microsoft.public.windows.server.sbs)
  • Renamed Admin Accounts 30 min Delayed Login to Client Workstations
    ... The original administrator account has been ... But when I try to use the account to login to any ... window still scrolls. ... But when I add back the home folder it fails. ...
    (microsoft.public.backoffice.smallbiz2000)