Solved

Domain admin password corruption/change.

Posted on 2010-11-17
7
406 Views
Last Modified: 2012-05-10
I have a domain with 2 AD controllers.
Upon rebooting either controller we are not able to log into the system with the admin account.
We can change the password (to the same thing as before) on the other AD controller we can then log in.

I have enabled auditing on the system to see if something is changing the password (policy) and nothing is/has.

I have looked at the FSMO roles to find that the domain controller (operations masters) cannot be found (i.e., ERROR) upon reboot.  if I force a sync, via Sites & Services, they FSMO roles return to normal.

I know that there is a misconfiguration someplace or some parts of the system are not communicating properly, however there are no DNS errors to indicate a naming issue and WINS is functioning properly.

Any ideas?
0
Comment
Question by:jeffmorlen
  • 5
  • 2
7 Comments
 
LVL 3

Author Comment

by:jeffmorlen
ID: 34161532
BTW: Both AD Controllers pass the DCDIAG test with no errors.
0
 
LVL 17

Expert Comment

by:OriNetworks
ID: 34161595
Backup systemstate of both, remove one from domain conroller role and see if the one dc gives you any problems. Be sure to seize all roles to this domain controller. Promote the other back to dc role and transfer any necessary demo roles. Maybe this will sync up any problems.  Other than that, any recent changes?
0
 
LVL 3

Author Comment

by:jeffmorlen
ID: 34163783
That is the path that I was heading down, but was hoping that someone had seen and then fixed this.

Due to this servers being part of a network that needs to be up 24/7, maintenance will have to be scheduled.

If someone else has seen this and fixed it, please let me know ASAP.  I'll be scheduling this work to be done soon.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 3

Author Comment

by:jeffmorlen
ID: 34205124
Anybody else have a solution other than an AD Server rebuild?
0
 
LVL 17

Expert Comment

by:OriNetworks
ID: 34209259
my suggestion is just to reinstall the role not necessarily rebuild the entire server
 It may be a quicker and easier solution for you.
0
 
LVL 3

Accepted Solution

by:
jeffmorlen earned 0 total points
ID: 34252396
Understood... however I was hoping to avoid that.
0
 
LVL 3

Author Closing Comment

by:jeffmorlen
ID: 34281159
No comments were posted as to fix to this issue.
A rebuild of the AD structure is not a fix.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question