Re: Help - administrator locked out!




"Ageing Brilliantine Stick Insect"
<AgeingBrilliantineStickInsect@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4977F0AC-41EF-4F73-A8A2-1237B6ADF2D9@xxxxxxxxxxxxxxxx
I have just come back from 6 weeks leave. While I was gone, users at one of
our remote branches started getting 'must change password in xx days'
messages (they have their own 1-server domain running W2K3). Being users,
all
they did was to note down the message, and then ring the help desk the day
AFTER xx days had expired! Now all their passwords have expired (apart
from 2
users who changed theirs in the required time) and they cannot log onto
the
domain. The really strange thing is that the passwords for the domain
administrator appear to have expired also, as well as the 'back-door'
account
I set up for myself for just such an occurrence. Their server still runs,
and
the users all have to log on as 1 of the 2 users who managed to change
their
passwords, and the enterprise app on their server is still running
also........it's just that no-one can now log onto the server console.

I am a little concerned as to what is my next move, because if I get it
wrong, there may be no way to recover the server......I'm even loathe to
reboot it.

Anyway......if I start up in safe mode (is that possible on W2K3?) would I
then be able to get in to fix up the passwords (or whatever else it is
that
has gone wrong)?

And just by way of interest.....can this actually happen? I mean I am
really
surprised that the administrator account has been locked out (....I wonder
if
it has been locked out due to repeated failed logon attempts?).....should
this actually happen, or should I start thinking 'virus'?

Mmh. In my experience, when a password has expired then
the user MUST enter a new password to log on. He is not
locked out, as long as he knows the expired password.


.



Relevant Pages

  • Re: AD error
    ... I'm glad to know you could logon server and change user settings. ... Log on SBS server with original Administrator account. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS_Database_Cleanup Failed
    ... Could you please let me know how I launch SQL Enterprise Manager. ... > Hi Alexander, ... > You can either manually rename the Administrator account on the computer ... > Administrator account names in the network (including the server). ...
    (microsoft.public.windows.server.sbs)
  • Re: iis lockdown & admin logout
    ... and I was told that if you used the administrator account as ... it would be good to "re-run" the IIS lockdown tool. ... revert settings to default settings before ... it's just running NT4 Server + latest IIS Lockdown ...
    (microsoft.public.inetserver.iis.security)
  • Re: emails not arriving or being sent problem
    ... I have an exchange server that is getting emails using VPOP3 Version ... Event Source: MSExchangeDS ... The Internet Mail Service administrator account is no longer valid. ...
    (microsoft.public.exchange.admin)
  • RE: Recovery console password problem
    ... The passwords of the server I ... It is kinda the problem WinXP has with recovery console and password. ... a Windows update, btw). ...
    (microsoft.public.windows.server.general)

Loading