waktasz
asked on
WSUS server computer account deleted, SID errors, can't connect to SQL
Have a bit of a problem.
In deploying a Virtual Machine from a template, a duplicate name was created on the network and our WSUS server computer account got blown away. The WSUS server was then rejoined to the domain, but now gets errors that it cannot connect to the SQL server where the WSUS database lives. We would think this is due to the User account in the SQL database called domain\Computername$ having an incorrect SID.
Is there a way to either fix this in SQL by repairing or recreating the account, or get the WSUS console to cooperate in some other way?
In deploying a Virtual Machine from a template, a duplicate name was created on the network and our WSUS server computer account got blown away. The WSUS server was then rejoined to the domain, but now gets errors that it cannot connect to the SQL server where the WSUS database lives. We would think this is due to the User account in the SQL database called domain\Computername$ having an incorrect SID.
Is there a way to either fix this in SQL by repairing or recreating the account, or get the WSUS console to cooperate in some other way?
TDKD
I would perform a non authoritative restore of the object (computer) in AD...
I actually would probably perform an Authoritatative Restore if the OU in which the computer object is still intact...
If you do not want to perform a restore you could always duplicate the old SID on the new one?? If you think this is indeed the issue??
ASKER
If I wanted to do that I'm not sure how to get the old SID back. The original computer account was deleted.
You can do this with Winternals NewSid Tool located here: http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx
Is the old physical server still around? Does the SQL server make reference of the SID it is quering?
If the physical server is still around you can simply run the NewSID tool on it and it will inform you of the current SID.
ASKER
The WSUS server is still around...everything is virtual here. It was removed and rejoined to the domain so the old SID is going to be gone, right?. Not sure how to get the old SID back on the machine and also in the computer account in AD. I guess restore the machine and the AD account? /Confused in Philadelphia
ASKER
At this point I think we are just going to do a WSUS reinstall. Hopefully that works.
If you change the SID on the new server it will automatically update in AD...The SQL Server seems to be looking for the old SID?? You stated... so if you re-create the old SID on the new WSUS server you should be ok....
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Excellent!!! Glad your all set :-)
Your very welcome!!
Your very welcome!!