Solved

OU for Contractor Users is "locked out". How do I undo?

Posted on 2011-02-24
4
339 Views
Last Modified: 2012-05-11
Win2k3r2

I come into work today and none of the contractors can log in. They get an error their account is locked. So i go into AD users and look at the users and the accounts are NOT locked. However what's strange is I can't modify any of these users. Everything is greyed out and if I even try to reset Password I am told "access is denied". I can't even move the users to a different OU.

Currently we have Top OU-Employee, under that we have OU-Contractor, OU-Baseline, OU- NetworkAdmin, OU-Visitors.  The only OU that seems to have it's contents affected is the Contractors.  I can't do ANYTHING in the OU, not even create something new or move or copy.

I compared the OU's "Security" and they all look identical.

Ideas on how to give me back access?  yes I am my domainAdmin account.
0
Comment
Question by:MushroomStamp
  • 3
4 Comments
 
LVL 9

Expert Comment

by:rawinnlnx9
ID: 34973297
I would copy that OU into a temp_OU. Then I would delete it or rename it. Then create the OU again and repopulate it. See if that helps.
0
 

Author Comment

by:MushroomStamp
ID: 34973512
There is no way to copy the OU or move it or its contents. Not that I can find anyway.  I could recreate the users in another OU, but I really need to understand this problem beause I have no idea how it happened or how to correct if it happens again. What happens if it happened to the main employee folder. Recreating each user isn't the answer.

I'm hoping there has to be some command line way of reseting rights back.
0
 

Accepted Solution

by:
MushroomStamp earned 0 total points
ID: 34973624
Not sure what the answer is, but I have solved the issue.
0
 

Author Closing Comment

by:MushroomStamp
ID: 35005316
Not sure why this started working.. I had tried many things. But it works now.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn about cloud computing and its benefits for small business owners.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

939 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question