Suddenly our 2000 Server doesn't accept our credentials!!

One of my clients has a rather strange problem I've never encountered before.

Their Windows 2000 server has started shutting down and since doing this, when restarting it, it will not allow us to logon, not accepting our credentials.

Furthermore, the 12 computers connected to it are fine keeping their connection to mapped drives, Internet, etc, however, if any are restarted they are unable to log back onto the domain.

No-one would have changed any passwords (family business) and I'm really stuck.

Thanks for any ideas.

Mike
 
mikeabc27Asked:
Who is Participating?
 
ChiefITConnect With a Mentor Commented:
Yes, a virus can mess with the logon service.
0
 
fhmcCommented:
are any of the currently logged in users domain admins?


if so, you could try the following from one of their command lines.

net user /domain /add tempadmin Password123!
net group /domain "domain admins" /add tempadmin


try to logon the the server using the "tempadmin" account using the password "Password123!"

does it work?

if not, I'll try to come up with some more NATIVE suggestions.
There are many utils available to deal with server and/or AD admin lockouts, but my preference is to exhaust my native options first.
0
 
ChiefITCommented:
What status do you have on the 2003 server? Computers can logon to domain shares and file shares prior to an actaul logon network connections are loaded prior to the logon screen. It seems like the actual logon process shuts down the NIC or TCP/IP protocol. It may be timing out.

It almost sounds like you have a problem with the TCP/IP stack. Having a problem with this could shut down your computer and will definately stop the Netlogon process. Look in Event logs for errors associated with the netlogon process. Maybe 5719, not logon servers available.

What I might do in your shoes is logon in safe mode without Network booting. Uninstall/Reinstall TCP/IP. Then, look into the event logs for errors that may point you in the right direction. Also run a netdiag at the safeboot command prompt.

NOTE: Your driver seems to be working fine, since your clients are still logging on with domain access.  
0
Cloud Class® Course: CompTIA Cloud+

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

 
fhmcCommented:
good point... I had not concidered the netlogon service part, and I agree, that's a likely culprit.
0
 
mikeabc27Author Commented:
Sorry for the delay in replying, I sent the orginal post from my clients and, as they're closed till Monday, I've brought the server home with me. Just got back and tested your ideas.

The two Domain Admin user accounts are amongst those showing Account Locked Out. I tried the tempadmin login but no luck.

The server is running 2000 and I've logging in using Safe Mode and Safe Mode - Command Prompt, but still get stuck at the login.
0
 
ChiefITCommented:
So, you don't even have the ability to logon locally?

 
0
 
mikeabc27Author Commented:
No I can't
0
 
fhmcCommented:
you may have to crack the local admin password to logon locally and then employ additional techniques to recover domain level access.

some of the following articles may prove useful:

http://www.petri.co.il/forgot_administrator_password.htm

http://www.petri.co.il/change_recovery_console_password.htm
http://www.petri.co.il/reset_domain_admin_password_in_windows_2000_ad.htm
0
 
mikeabc27Author Commented:
Thanks fhmc I'll try those.
0
 
mikeabc27Author Commented:

Could a virus/disk corruption have altered the account profiles causing a failure to authenticate?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.