Re: SBS locked me out ? oh and eveyone including administrator aswell.

It is very unlikely for AD to behave this way unless it got corrupted, etc.

Unfortunately because of the route you've gone, you restored to a point in time before the failure *including* the event logs...so any attempt to identify the problem is really a practice in academics. You'll never verify the problem so, even if you were hacked, you no longer have any records to help identify the hacker.

Personally, just to be safe, I'd reset any power-user and Admin passwords, and as best practice you shouldn't have a generic admin user. Each person who needs admin access should have their own admin account as well as their regular account. That way one person inadvertently locking an account doesn't lock down the whole system. Obviously someone inside the company with admin access could *intentionally* do such a thing...but that is an entirely different matter.

-Cliff


"Aart Jansen" <aart@xxxxxxxxxxxx> wrote in message news:uEdq8saJJHA.3644@xxxxxxxxxxxxxxxxxxxxxxx
Ok this morning I was using my PC as normal (vista) and it told me I needed
to lock and unlock because I needed to reauthenticate.

So I thought ok, whatever, only it wouldn't accept my password. so I tried
the admin and another user, all failed.

SO I walked over to the server, and attempted to login as administrator,
same thing.


OOOKAAAYY..

I shutdown the server (pulled the plug.) And rebooted in AD restore mode and restored the
system state to last night, rebooted and all was fine.

I probably should have just done a normal reboot to see if that would fix it
but I was kind of thinking maybe I has been hacked!

Can active directory stop working in SBS and prevent all logins? Also my
Worry free trend ran to the end of its grace period (last night) I wonder if
it broke my server when it disabled itself.

It's all go now just don't understand why it stopped. (I checked the
security logs but there was no obvious hacking attempt, I have closed port
80, some idiot (me) left that open sometime ago.)

.

Relevant Pages
Loading