Fixed missing NTDLR, server rebooted will only log on locally

Posted on 2009-04-29
Last Modified: 2012-05-06
We had the conficker virus in March due to a WSUS server having stopped working largely. we cleaned up and patched. All PC's are ok, however this week I rebboted one of our citrix servers and got missing NTDLR message - I repaired it successfully on Monday and has been ok since. A sneaking suspicion came to me that other servers might be similarly not ok so I rebooted two more - one repaired ok. The other appeared to repair ok but will no not log onto the domain, only locally. It is a citrix server and is allowing people to us it as part of farm. So we are ok in a temporary kind of way

We still need to solve why this server won't let you log onto domain - it refuses credentials as if your name and/or password is wrong - got onw of my engineers to try just in case it was me.

So, an odd one, any ideas anyone?
Question by:sasdaniels
    LVL 12

    Accepted Solution

    Have you tried removing it from the domain and deleting the computer from AD and re-adding it?
    LVL 6

    Assisted Solution

    have you tried to remove and readd it to the domain? Oh and check to make sure your entering the right password. I had a server I couldn't get back on the domain and come to find out that the shift key was broken so i was always putting in the wrong password.

    Author Comment

    We were just talking about that - the obvious we thoroughly checked, call me a fool though if I come back on saying caps lock was on! (it isn't)

    I also thought that maybe deleting local copies of profiles might do something, I'll try that in a minute with domain admin account. Conficker did do stuff to domain accounts, locking them in AD, so maybe on 1st of April it did something else. Also considered fixmbr and fixboot - no harm trying that I guess

    I need more information re the citrix farm if I take off domain and add again - any citrix gurus out there?

    Thanks for your help so far, Andy

    Author Comment

    The problem was the event log had become full. Was able to log on locally and clear this, plus increase storage for event log - will split points

    Author Closing Comment

    Problem was actually event log full, local log on and clear this solved the problem

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
    I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now