RE: urgent, can't get AD mmc to work on my workstation after chaning p

Tech-Archive recommends: Fix windows errors by optimizing your registry

Billd:

I am no authority, but do the other DC MMCs also fail - i.e., can you access
the AD Sites and Services snap-in or will you get a similar error message?

Is it possible that a nefarious exiting employee (who had permissions to
create/change a link-enabled GPO) simply removed that snap-in from the
permitted list in your linked GPOs? Can you check the permissions on this
object to ensure that your login account/group is currently supposed to have
access? Alternatively, can you Runas with higher permissions (at least as a
test)?

If not a permissions problem, might reinstalling the AdminTools on your XP
machine resolve the issue?

--
JCB\1059


"billd" wrote:

Hi, several people left the company last week and one of them knew my
password, so I had to change it. We are running windows server 2003 SP1. I
changed the password, but since then, I am unable to start the AD users and
computers MMC on my Win XP workstation when I am logged in with my new
password. I am logged into the domain, we only have one domain. I have no
problems logging into the domain.

The error message I get is:

Naming information cannot be located because:
Logon failure: unknown username or bad password.
Contact your system administrator to verify that your domain is probperly
configured and is currently online.

I am the admin and the domain is online and has always been properly
configured as far as I can tell. I can RDP into the servers and start AD mmc
with no problems.

I have removed my Workstation from the Domain and rejoined and the problem
persists. Nothing else in the domain has changed.

I press OK on the above message, teh MMC opens but the correct info isn't
there.

I am also getting these in the event log:

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 675
Date: 2/16/2006
Time: 10:58:24 AM
User: NT AUTHORITY\SYSTEM
Computer: ITCHY
Description:
Pre-authentication failed:
User Name: billd
User ID: CONTUSO\billd
Service Name: krbtgt/CONTUSO.COM
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: 127.0.0.1


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

.

Relevant Pages

  • Re: problems with admin tools
    ... That simply doing a start / run of mmc does this is some ... received inherited permissions from Windows\System32 ... Restore XP to installation Security Defaults ... >>Microsoft MVP (Windows Server System: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cant run MMC - non-trivial problem
    ... (But this has to do with permissions on the installer directory, ... It may have to do with permissions on some level. ... But this was mostly dealing with running MMC ... > When I try to start any MMC applications on my system, ...
    (microsoft.public.win2000.security)
  • Re: problems with admin tools
    ... I had checked permissions for all ... >That simply doing a start / run of mmc does this is some ... >Power Users Modify ... >properties of the folder when in a Safe mode boot. ...
    (microsoft.public.windowsxp.security_admin)
  • Administrator help desk personnel manage
    ... We also created a custom MMC, but during our migration to ... helpdesk we need 2 sets of MMC with different permissions. ... >states there not forced to change password. ...
    (microsoft.public.win2000.security)
  • Re: Cannot access administrative tools
    ... You can do this with cacls in a cmd windows. ... There may be some repeats (if permissions is both set ... > I have the exact same problem, error message below ... > mmc console, or was created by a later version of MMC. ...
    (microsoft.public.windowsxp.security_admin)