?
Solved

Can't log in to SBS2011 Server

Posted on 2014-01-08
16
Medium Priority
?
1,518 Views
Last Modified: 2014-03-03
Set up a SBS2011 server 7 months ago with only 2 users: Administrator & Duncan. All was well until today when Duncan tries to log in but gets "Username or password incorrect" message; Tries to log in as Administrator & gets message "Your account has been disabled". No-one else has access to server so no-one could have been meddling. Tried re-booting in both normal & safe mode with same results.
0
Comment
Question by:laurencoull
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
  • +4
16 Comments
 
LVL 12

Expert Comment

by:aindelicato
ID: 39765433
On SBS, the administrator account is disabled by default.


Do you have a machine joined to that domain?  Can you login to the domain as Duncan on that machine?  Is Duncan in the Admin group?

You can check this article, has instructions on resetting a password.

http://blogs.technet.com/b/sbs/archive/2009/02/27/what-username-and-password-do-i-need-to-use-for-directory-services-restore-mode-dsrm-in-sbs-2008.aspx
0
 

Author Comment

by:laurencoull
ID: 39769032
Right: Managed to boot in DSRM mode & log into Windows ok. So at least I can get at the data & copy it off which was a worry as I have visions of having to end up re-formatting the hard drive & starting over.
Of course as it took me in in Safe Mode, I only get Windows running as if it was a normal pc, with no access to the SBS domain or Active Directory. If I did have access to AD then of course I could change the passwords, add new domain users with known passwords, etc. But I can only access local Windows user accounts so I can't.
Hoping someone can tell me how to get from here to seeing the domain, AD, etc?
If not and I do have to start over, are we talking a re-format job or would Windows install itself into a second folder with the data intact?
0
 
LVL 77

Accepted Solution

by:
Rob Williams earned 668 total points
ID: 39773274
I have written a blog article on resetting the domain admin password you may find helpful.
http://blog.lan-tech.ca/2011/10/05/reset-domain-administrator-password/

Keep in mind your system may have been hacked and can never be trusted again without rebuilding.
0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 30

Expert Comment

by:pgm554
ID: 39773400
This sounds like one of those M$ security gottchas that by default,every 180 days the account forces pass word change and if you didn't change ,the account get disabled.

Just had it happen to me about 2 or 3 weeks ago.

A real pain in the butt.
0
 
LVL 31

Assisted Solution

by:Gareth Gudger
Gareth Gudger earned 668 total points
ID: 39774347
There are a lot of 3rd party tools out there that will boot up from CD and allow you to reset a lost Domain Admin password. PassWare is my go to tool. Works like a charm and breaks the domain admin password in seconds.
http://www.lostpassword.com/windows.htm
0
 
LVL 23

Assisted Solution

by:yo_bee
yo_bee earned 664 total points
ID: 39774827
Do you have RSAT installed on any of the W7 machines. If not install it and add Users and Computer and see if you can access the data. If this does not work you will have to goto a backup of your system.

Do you have a solid backup of your AD database?  Run a restore of the system state which includes the AD DB.

This should get you back.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39799083
There's a little trick you can use to get the Domain Admin account re-enabled upon reboot.  

Read about it here:
http://www.howtogeek.com/106333/how-to-reset-your-forgotten-domain-admin-password-on-server-2008-r2/

Jeff
TechSoEasy
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 39799404
As covered in ID: 39773274 above  :-)
--Rob
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 39799647
I have used Passware's WinKey tons of times. It will reset a domain admin password. Unfortunately, it does cost $300 but can save you a lot of time and effort.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 39844300
Were you actually able to reset the Admin account logon password with the answer you selected?  That really only addresses the DSRM (Directory Services Restore Mode) password, not the logon password.  Just curious.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 39847260
The author even mentions the accepted solution did not allow them to access Active Directory and change the password in ID:39769032 which would indicate the wrong answer was selected.

My (RobWill) recommendation ID: 39773274 which is free,
diggisaur' recommendation ID: 399774347 $295 which is also including in the link I provided,
yo_bee's recommendation ID: 39774827 free but lengthy,
and Jeffrey Kane's recommendation ID:39799083 a duplicate of ID:39773274,
will all work satisfactorily.
Perhaps a point split between these would be appropriate.
Thanks,
--Rob
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 39851859
no need to include mine -- fyi, it wasn't a duplicate, but rather a reinforcement of ID:39773274

:-)
0

Featured Post

New benefit for Premium Members - Upgrade now!

Ready to get started with anonymous questions today? It's easy! Learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
This article describes how to import an Outlook PST file to Office 365 using a third party product to avoid Microsoft's Azure command line tool, saving you time.
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question