Solved

OU for Contractor Users is "locked out". How do I undo?

Posted on 2011-02-24
4
340 Views
Last Modified: 2012-05-11
Win2k3r2

I come into work today and none of the contractors can log in. They get an error their account is locked. So i go into AD users and look at the users and the accounts are NOT locked. However what's strange is I can't modify any of these users. Everything is greyed out and if I even try to reset Password I am told "access is denied". I can't even move the users to a different OU.

Currently we have Top OU-Employee, under that we have OU-Contractor, OU-Baseline, OU- NetworkAdmin, OU-Visitors.  The only OU that seems to have it's contents affected is the Contractors.  I can't do ANYTHING in the OU, not even create something new or move or copy.

I compared the OU's "Security" and they all look identical.

Ideas on how to give me back access?  yes I am my domainAdmin account.
0
Comment
Question by:MushroomStamp
  • 3
4 Comments
 
LVL 9

Expert Comment

by:rawinnlnx9
ID: 34973297
I would copy that OU into a temp_OU. Then I would delete it or rename it. Then create the OU again and repopulate it. See if that helps.
0
 

Author Comment

by:MushroomStamp
ID: 34973512
There is no way to copy the OU or move it or its contents. Not that I can find anyway.  I could recreate the users in another OU, but I really need to understand this problem beause I have no idea how it happened or how to correct if it happens again. What happens if it happened to the main employee folder. Recreating each user isn't the answer.

I'm hoping there has to be some command line way of reseting rights back.
0
 

Accepted Solution

by:
MushroomStamp earned 0 total points
ID: 34973624
Not sure what the answer is, but I have solved the issue.
0
 

Author Closing Comment

by:MushroomStamp
ID: 35005316
Not sure why this started working.. I had tried many things. But it works now.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now