• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1830
  • Last Modified:

Can't log in to SBS2011 Server

Set up a SBS2011 server 7 months ago with only 2 users: Administrator & Duncan. All was well until today when Duncan tries to log in but gets "Username or password incorrect" message; Tries to log in as Administrator & gets message "Your account has been disabled". No-one else has access to server so no-one could have been meddling. Tried re-booting in both normal & safe mode with same results.
0
laurencoull
Asked:
laurencoull
  • 4
  • 2
  • 2
  • +4
3 Solutions
 
aindelicatoCommented:
On SBS, the administrator account is disabled by default.


Do you have a machine joined to that domain?  Can you login to the domain as Duncan on that machine?  Is Duncan in the Admin group?

You can check this article, has instructions on resetting a password.

http://blogs.technet.com/b/sbs/archive/2009/02/27/what-username-and-password-do-i-need-to-use-for-directory-services-restore-mode-dsrm-in-sbs-2008.aspx
0
 
laurencoullAuthor Commented:
Right: Managed to boot in DSRM mode & log into Windows ok. So at least I can get at the data & copy it off which was a worry as I have visions of having to end up re-formatting the hard drive & starting over.
Of course as it took me in in Safe Mode, I only get Windows running as if it was a normal pc, with no access to the SBS domain or Active Directory. If I did have access to AD then of course I could change the passwords, add new domain users with known passwords, etc. But I can only access local Windows user accounts so I can't.
Hoping someone can tell me how to get from here to seeing the domain, AD, etc?
If not and I do have to start over, are we talking a re-format job or would Windows install itself into a second folder with the data intact?
0
 
Rob WilliamsCommented:
I have written a blog article on resetting the domain admin password you may find helpful.
http://blog.lan-tech.ca/2011/10/05/reset-domain-administrator-password/

Keep in mind your system may have been hacked and can never be trusted again without rebuilding.
0
Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

 
pgm554Commented:
This sounds like one of those M$ security gottchas that by default,every 180 days the account forces pass word change and if you didn't change ,the account get disabled.

Just had it happen to me about 2 or 3 weeks ago.

A real pain in the butt.
0
 
Gareth GudgerCommented:
There are a lot of 3rd party tools out there that will boot up from CD and allow you to reset a lost Domain Admin password. PassWare is my go to tool. Works like a charm and breaks the domain admin password in seconds.
http://www.lostpassword.com/windows.htm
0
 
yo_beeDirector of Information TechnologyCommented:
Do you have RSAT installed on any of the W7 machines. If not install it and add Users and Computer and see if you can access the data. If this does not work you will have to goto a backup of your system.

Do you have a solid backup of your AD database?  Run a restore of the system state which includes the AD DB.

This should get you back.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
There's a little trick you can use to get the Domain Admin account re-enabled upon reboot.  

Read about it here:
http://www.howtogeek.com/106333/how-to-reset-your-forgotten-domain-admin-password-on-server-2008-r2/

Jeff
TechSoEasy
0
 
Rob WilliamsCommented:
As covered in ID: 39773274 above  :-)
--Rob
0
 
Gareth GudgerCommented:
I have used Passware's WinKey tons of times. It will reset a domain admin password. Unfortunately, it does cost $300 but can save you a lot of time and effort.
0
 
Rob WilliamsCommented:
Were you actually able to reset the Admin account logon password with the answer you selected?  That really only addresses the DSRM (Directory Services Restore Mode) password, not the logon password.  Just curious.
0
 
Rob WilliamsCommented:
The author even mentions the accepted solution did not allow them to access Active Directory and change the password in ID:39769032 which would indicate the wrong answer was selected.

My (RobWill) recommendation ID: 39773274 which is free,
diggisaur' recommendation ID: 399774347 $295 which is also including in the link I provided,
yo_bee's recommendation ID: 39774827 free but lengthy,
and Jeffrey Kane's recommendation ID:39799083 a duplicate of ID:39773274,
will all work satisfactorily.
Perhaps a point split between these would be appropriate.
Thanks,
--Rob
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
no need to include mine -- fyi, it wasn't a duplicate, but rather a reinforcement of ID:39773274

:-)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

  • 4
  • 2
  • 2
  • +4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now