Solved

Domain admin password corruption/change.

Posted on 2010-11-17
7
402 Views
Last Modified: 2012-05-10
I have a domain with 2 AD controllers.
Upon rebooting either controller we are not able to log into the system with the admin account.
We can change the password (to the same thing as before) on the other AD controller we can then log in.

I have enabled auditing on the system to see if something is changing the password (policy) and nothing is/has.

I have looked at the FSMO roles to find that the domain controller (operations masters) cannot be found (i.e., ERROR) upon reboot.  if I force a sync, via Sites & Services, they FSMO roles return to normal.

I know that there is a misconfiguration someplace or some parts of the system are not communicating properly, however there are no DNS errors to indicate a naming issue and WINS is functioning properly.

Any ideas?
0
Comment
Question by:jeffmorlen
  • 5
  • 2
7 Comments
 
LVL 3

Author Comment

by:jeffmorlen
Comment Utility
BTW: Both AD Controllers pass the DCDIAG test with no errors.
0
 
LVL 17

Expert Comment

by:OriNetworks
Comment Utility
Backup systemstate of both, remove one from domain conroller role and see if the one dc gives you any problems. Be sure to seize all roles to this domain controller. Promote the other back to dc role and transfer any necessary demo roles. Maybe this will sync up any problems.  Other than that, any recent changes?
0
 
LVL 3

Author Comment

by:jeffmorlen
Comment Utility
That is the path that I was heading down, but was hoping that someone had seen and then fixed this.

Due to this servers being part of a network that needs to be up 24/7, maintenance will have to be scheduled.

If someone else has seen this and fixed it, please let me know ASAP.  I'll be scheduling this work to be done soon.
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 3

Author Comment

by:jeffmorlen
Comment Utility
Anybody else have a solution other than an AD Server rebuild?
0
 
LVL 17

Expert Comment

by:OriNetworks
Comment Utility
my suggestion is just to reinstall the role not necessarily rebuild the entire server
 It may be a quicker and easier solution for you.
0
 
LVL 3

Accepted Solution

by:
jeffmorlen earned 0 total points
Comment Utility
Understood... however I was hoping to avoid that.
0
 
LVL 3

Author Closing Comment

by:jeffmorlen
Comment Utility
No comments were posted as to fix to this issue.
A rebuild of the AD structure is not a fix.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

Suggested Solutions

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Learn about cloud computing and its benefits for small business owners.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now