Re: Password Problem - Server

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


<compsosinc@xxxxxxxxx> wrote in message
news:1170797337.286076.156290@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
On Feb 6, 4:03 pm, "SBS in Silicon Valley"
<user...@xxxxxxxxxxxxxxxxxx> wrote:
See my post comments inserted below.



- Show quoted text -

1. At a workstation, a user can login to the domain using their
credentials. We are not sure if this user in in the Domain Admins
group. I think we should try a user who is?

This has nothing to do with your problems or issues.

2. At the same workstation, we cannot login to the Administrator
account on the domain. We get error that password is incorrect like we
do at the server.

If you cannot log onto a workstation with the administrators account then
you won't be able login at the server either. It does sound like your
inputting an incorrect password.

3. At the server, we cannot login with (3) different Domain Admin
accounts or the Administrator account.

Given the facts as you describe it looks like a few things here. The
password on the administrators account has been changed.or I would say
that
some messed around with the Domain GPO's and removed the Domain Admins
from
the log on locally policy that is preventing the administrator from
logging
onto a workstation or on the server. Those other Domain Administrator
accounts are experiencing the same symptons.

Try this. Log onto a workstation as the user or a user who is a local
administrator on that machine. Open the Local Policy editor and check the
policy "Log on locally" and see if the Domain Administrators goup is
included in the policy.

Thank you for all of your input. I will be on-site tomorrow and will
follow your instructions. As a heads up, if the Domain Administrators
group is included in the local policy of the workstation, what does
that mean?

If you can log onto a workstation as the local machine administrator and
check the local policies and do not see the "Administrators" or "Domain
Administrators" group in the Log On Locally policy then this means someone
has messed around with the policies. I'm not too sure if this is your issue
as a user can logon the workstation which usually means that the Domain
Users are part of the Log on Locally policy and that Domain Administrator
should be a member of that group. Which leads me to think it is a password
issue.

And if the Domain Admins group has been removed, what can we do? This
should not affect the local Administrator account on the server,
should it, since it is a member of the Adminstrators and Domain Admins
group?

Given what I just wrote above I'm suspecting that the password on the
administrators account is worng and that the administrators account has been
locked out after several failed attempts. Now why the other user accounts
that you claim are members of the Domain Administrators group cannot login
either I'm suspecting they have been removed from the Domain Administrators
group. Can these users log onto that same workstation where the
Administrator cannot?

Also, assuming the Domain Admins group is toast, that would obviously
mean any user who is a member of the "Domain Admins" group should not
be be able to login to the domain. But is login informatiojn cached on
the workstation? I should probably reboot the workstation first...

You need to update the Log on Locally policy and add the Domain
Administrators group to that policy. You can do it from the DC if you can
log on and push the GPO throughoutthe domain.



.

Relevant Pages

  • Re: Password Problem - Server
    ... been added to the local Administrators group on the workstations. ... accounts or the Administrator account. ... onto a workstation or on the server. ... Open the Local Policy editor and check ...
    (microsoft.public.windows.server.sbs)
  • Administrators password locked out-Need help ASAP
    ... I was currently tasked to rename on ... The administrators in AD ... gave me access to rename our workstation names to the ... administrators account be locked out. ...
    (microsoft.public.win2000.group_policy)
  • Re: Permission prob writing to HKEY_LOCAL_MACHINE
    ... In microsoft.public.win2000.registry Terry Holland wrote: ... Administrators account, but once installed it should be using HKCU to ... change the permissions on the key in question. ...
    (microsoft.public.win2000.registry)
  • Re: Administrators password locked out-Need help ASAP
    ... I am confused as to why you would rename a domain computer and then remove it from ... The administrators in AD ... > gave me access to rename our workstation names to the ... > administrators account be locked out. ...
    (microsoft.public.win2000.group_policy)
  • Re: BOGUS ADMINISTRATOR?
    ... program from an Administrators account. ... I have setup and sign-in as Bob B. with a password. ... You are incorrect about being the only user. ...
    (microsoft.public.windowsxp.configuration_manage)