Solved

Domain admin password corruption/change.

Posted on 2010-11-17
7
408 Views
Last Modified: 2012-05-10
I have a domain with 2 AD controllers.
Upon rebooting either controller we are not able to log into the system with the admin account.
We can change the password (to the same thing as before) on the other AD controller we can then log in.

I have enabled auditing on the system to see if something is changing the password (policy) and nothing is/has.

I have looked at the FSMO roles to find that the domain controller (operations masters) cannot be found (i.e., ERROR) upon reboot.  if I force a sync, via Sites & Services, they FSMO roles return to normal.

I know that there is a misconfiguration someplace or some parts of the system are not communicating properly, however there are no DNS errors to indicate a naming issue and WINS is functioning properly.

Any ideas?
0
Comment
Question by:jeffmorlen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
7 Comments
 
LVL 3

Author Comment

by:jeffmorlen
ID: 34161532
BTW: Both AD Controllers pass the DCDIAG test with no errors.
0
 
LVL 17

Expert Comment

by:OriNetworks
ID: 34161595
Backup systemstate of both, remove one from domain conroller role and see if the one dc gives you any problems. Be sure to seize all roles to this domain controller. Promote the other back to dc role and transfer any necessary demo roles. Maybe this will sync up any problems.  Other than that, any recent changes?
0
 
LVL 3

Author Comment

by:jeffmorlen
ID: 34163783
That is the path that I was heading down, but was hoping that someone had seen and then fixed this.

Due to this servers being part of a network that needs to be up 24/7, maintenance will have to be scheduled.

If someone else has seen this and fixed it, please let me know ASAP.  I'll be scheduling this work to be done soon.
0
Comparison of Amazon Drive, Google Drive, OneDrive

What is Best for Backup: Amazon Drive, Google Drive or MS OneDrive? In this free whitepaper we look at their performance, pricing, and platform availability to help you decide which cloud drive is right for your situation. Download and read the results of our testing for free!

 
LVL 3

Author Comment

by:jeffmorlen
ID: 34205124
Anybody else have a solution other than an AD Server rebuild?
0
 
LVL 17

Expert Comment

by:OriNetworks
ID: 34209259
my suggestion is just to reinstall the role not necessarily rebuild the entire server
 It may be a quicker and easier solution for you.
0
 
LVL 3

Accepted Solution

by:
jeffmorlen earned 0 total points
ID: 34252396
Understood... however I was hoping to avoid that.
0
 
LVL 3

Author Closing Comment

by:jeffmorlen
ID: 34281159
No comments were posted as to fix to this issue.
A rebuild of the AD structure is not a fix.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question