Re: all users disapeared

Thank you for your reply

No I did not delete them by mistake.

But I did have an sql injection attack some time ago, following that I found that someone had set up a admin account, also I found 2 poker programs installed on my server that I never installed myself.

I cleaned up and then about a months later this happens

By the way I ended up reinstalling system state to fix the problem I also uninstalled the SQL server and reinstalled it and changed all passwords for all databases.

If someone one did access my server gain hopefully this will solve that problem. I hope


"Miles Li [MSFT]" <v-mileli@xxxxxxxxxxxxxxxxxxxx> wrote in message news:xwhtBc7IJHA.3772@xxxxxxxxxxxxxxxxxxxxxxxxx
Hello,

Thank you for posting here.

According to your description, I understand that:

You find that the user accounts in the Active Directory are missing.

If I have misunderstood the problem, please don't hesitate to let me know.

First of all, I'd like to know whether you delete the user accounts by
mistake. If yes, you may have to restore the objects from the backup. To
avoid the issue in the future, you may refer to the Microsoft knowledge
base 840001 to set the permission to disallow deletion on the objects.

840001 How to restore deleted user accounts and their group memberships in
Active Directory
http://support.microsoft.com/?kbid=840001

Based on my experience, replacing files will not make the Users accounts
(objects) in the Active Directory all fall away. However, to isolate the
issue from any virus, please perform a clean boot and virus scan on the SBS
Server to see if the issue is related to any third-party application or
viruses:

a) Click Start->Run...->type msconfig and press Enter.
b) Click Services tab and select Hide All Microsoft Services and Disable
All third party Services.
c) Click Startup tab and Disable All startup items.
d) Click OK and choose Restart.
e) After reboot, check whether the problem still occurs.
f) If there are no more problems, please use the above steps to enable
services and startup items one by one in order to figure out the root cause
of this issue.

Please help to collect more information for the further investigation:

1. Do only user accounts disappear in the Active Directory? What about the
computer accounts and other non-builtin objects?
2. Can domain users still log onto the domain with their account?
3. Have you moved the user accounts to a difference OU? You may try to
search the user account name in the Active Directory Users and Computers¡£
4. Please help to collect the MPS report on the SBS server and send it to
me at Miles Li <mailto:v-mileli@xxxxxxxxxxxxx>. The report will contain the
SBS server Event logs, DNS diagnosis logs and Active Directory diagnosis
that will help for the troubleshooting.

Microsoft Product Support's Reporting Tools (MPSRPT_DirSvc.EXE)
http://www.microsoft.com/downloads/details.aspx?FamilyID=CEBF3C7C-7CA5-408F-
88B7-F9C79B7306C0&displaylang=en

If you have any questions or concerns, please do not hesitate to let me
know.



Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


.

Relevant Pages

  • Re: SBS 2000 install problems (need to reinstall from scratch)
    ... I am NOT wanting to keep all of Active Directory. ... corrupt the new install. ... have any problem with recreating the user accounts at this point. ... >> I am familiar with the Active Directory replication from one server to ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: Active Directory Repair indices
    ... most times it gives a message saying 'Active directory is rebuilding ... Click Services tab and select Hide All Microsoft Services and Disable ... Apply Predefined Security Templates in Windows Server 2003 ... 38814409-Active Directory Repair indices. ...
    (microsoft.public.windows.server.sbs)
  • Re: Migrate or not??
    ... If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. ... I understand that you are going to migrate your server to SBS 2K3 server ... Actually, Swing Migration is not the Microsoft recommended method, and we ... moving users, groups, and computers from one Active Directory? ...
    (microsoft.public.windows.server.sbs)
  • Re: Reset User Password SBS 2003
    ... Cris Hanna [SBS - MVP] ... Windows Small Business Server 2008 Unleashed ... A Microsoft Registered Partner ... The User Accounts are not held on the client PC's themselves. ...
    (microsoft.public.windows.server.sbs)
  • Re: Reset User Password SBS 2003
    ... The User Accounts are not held on the client PC's themselves. ... As I said before the Server works well, it hots a database as well as our ... A Microsoft Registered Partner ... I don't think the Exchange OWA method will work, ...
    (microsoft.public.windows.server.sbs)