Avatar of laurencoull
laurencoull
 asked on

Can't log in to SBS2011 Server

Set up a SBS2011 server 7 months ago with only 2 users: Administrator & Duncan. All was well until today when Duncan tries to log in but gets "Username or password incorrect" message; Tries to log in as Administrator & gets message "Your account has been disabled". No-one else has access to server so no-one could have been meddling. Tried re-booting in both normal & safe mode with same results.
OutlookSBSMicrosoft Server OS

Avatar of undefined
Last Comment
Jeffrey Kane - TechSoEasy

8/22/2022 - Mon
aindelicato

On SBS, the administrator account is disabled by default.


Do you have a machine joined to that domain?  Can you login to the domain as Duncan on that machine?  Is Duncan in the Admin group?

You can check this article, has instructions on resetting a password.

http://blogs.technet.com/b/sbs/archive/2009/02/27/what-username-and-password-do-i-need-to-use-for-directory-services-restore-mode-dsrm-in-sbs-2008.aspx
laurencoull

ASKER
Right: Managed to boot in DSRM mode & log into Windows ok. So at least I can get at the data & copy it off which was a worry as I have visions of having to end up re-formatting the hard drive & starting over.
Of course as it took me in in Safe Mode, I only get Windows running as if it was a normal pc, with no access to the SBS domain or Active Directory. If I did have access to AD then of course I could change the passwords, add new domain users with known passwords, etc. But I can only access local Windows user accounts so I can't.
Hoping someone can tell me how to get from here to seeing the domain, AD, etc?
If not and I do have to start over, are we talking a re-format job or would Windows install itself into a second folder with the data intact?
ASKER CERTIFIED SOLUTION
Rob Williams

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
pgm554

This sounds like one of those M$ security gottchas that by default,every 180 days the account forces pass word change and if you didn't change ,the account get disabled.

Just had it happen to me about 2 or 3 weeks ago.

A real pain in the butt.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
SOLUTION
Gareth Gudger

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
SOLUTION
yo_bee

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Jeffrey Kane - TechSoEasy

There's a little trick you can use to get the Domain Admin account re-enabled upon reboot.  

Read about it here:
http://www.howtogeek.com/106333/how-to-reset-your-forgotten-domain-admin-password-on-server-2008-r2/

Jeff
TechSoEasy
Rob Williams

As covered in ID: 39773274 above  :-)
--Rob
Gareth Gudger

I have used Passware's WinKey tons of times. It will reset a domain admin password. Unfortunately, it does cost $300 but can save you a lot of time and effort.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Rob Williams

Were you actually able to reset the Admin account logon password with the answer you selected?  That really only addresses the DSRM (Directory Services Restore Mode) password, not the logon password.  Just curious.
Rob Williams

The author even mentions the accepted solution did not allow them to access Active Directory and change the password in ID:39769032 which would indicate the wrong answer was selected.

My (RobWill) recommendation ID: 39773274 which is free,
diggisaur' recommendation ID: 399774347 $295 which is also including in the link I provided,
yo_bee's recommendation ID: 39774827 free but lengthy,
and Jeffrey Kane's recommendation ID:39799083 a duplicate of ID:39773274,
will all work satisfactorily.
Perhaps a point split between these would be appropriate.
Thanks,
--Rob
Jeffrey Kane - TechSoEasy

no need to include mine -- fyi, it wasn't a duplicate, but rather a reinforcement of ID:39773274

:-)
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck