Re: create local user on DC?
From: Steve Athanas (steveathanas_at__nospamhere_gmail.com)
Date: 01/07/05
- Next message: Steve Athanas: "Re: Changing Service Account Passwords"
- Previous message: Joshua: "Changing Service Account Passwords"
- In reply to: Roy T: "RE: create local user on DC?"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 7 Jan 2005 13:16:08 -0500
Hi, Roy.
When you initially installed Active Directory on the DC in question, it
asked you for a Directory Services Restore Mode Password. It should be
written down somewhere safe, becuase this is the only way to recover AD
should it go bye-bye at some point. You can get more information on it here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;322672
Anyway, DSRM is the only way to add a local user to a DC, I'm pretty sure,
as when you start the DC in that mode (accessible at the "Starting Windows"
screen with the F8 key) it doesn't load AD for clients. This is how you
would restore an OU or object in AD.
Oh, yeah. NEVER give that to a non admin user. That would be a coup-de-grace
for your system if it were used wrong, or got out to the wrong people. We
keep ours in a safe that you need three people's keys to get into.
Hope that helps! Good luck with your goals!
-- Steve Athanas MCSE (2003) "Roy T" <RoyT@discussions.microsoft.com> wrote in message news:2508BE45-1ADC-455D-95C0-B9E1847A5996@microsoft.com... > Hi Andrei, > > I am trying relocate All user profile from C: to D: that why i have to > copy > everything in C:\Documents and Settings to D:. However, i failed to copy > some files, because they are used by some services/processes. I am not > sure > what are using them, and i have tried to stop almost all the services but > no > luck. BTW, what is Directory Services Restore Mode Password? How to use > it > and what can it do? Is it save to pass it to non-system admin user? > > Cheers > > >> Probably it's not working in safe mode because AD is not running. Try >> using >> the Directory Services Restore Mode password. >> What are you tring to accomplish by copying All Users Profile ? >> >> Andrei Ungureanu >> www.eventid.net >> Free Windows event logs reports >> http://www.altairtech.ca/evlog/ >> >> "Roy T" wrote: >> >> > Hi all, >> > >> > I am trying to create a local user account for the Win2k DC, because i >> > would >> > like to use the local user account to login Safe mode, I know i can >> > always >> > use the administrator account, but the thing is the machine is sitting >> > remotely, the only way i can do it passes my administrator login to >> > someone >> > there and ask him to do it, but i prefer not to do that. I understand >> > that >> > on the DC you are not allow to create any local accout, but whatever i >> > create >> > in the AD Users and Computers won't work in safe mode. >> > >> > The reason why i have to login to safe mode is because i would like to >> > copy >> > the "All Users profile" in C:\Documents and Settings to some other >> > location, >> > but i won't let me do it, because some operations have taken control of >> > some >> > of the files. I simply can't copy it. I tried to stop almost all the >> > services, or restart the server or programs, but no success. >> > >> > Thanks in advacne!!
- Next message: Steve Athanas: "Re: Changing Service Account Passwords"
- Previous message: Joshua: "Changing Service Account Passwords"
- In reply to: Roy T: "RE: create local user on DC?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
