windows 2012 server possibly hacked or something failed on server can access under administrator account of windows 2003 member server

Posted on 2014-08-26
Last Modified: 2014-08-29
I have a windows 2012 Server that has possibly been hacked, the client hasn't performed a backup in a month.  Tonight you cant login to DC under any account and under the Windows 2003 member server I can log in and access info.  I have  copied over live necessary data.  Is there anyway I can reset the password on the dc for that 2003 box?
Question by:mberryaz
    LVL 19

    Accepted Solution

    You can open a MMC console and add computer management snap in. Then connect to Windows 2003 server from MMC console and change all local passwords.

    Ensure you have only one or two accounts under domain admins group on Active Directory, then perform a massive password change (to all accounts).
    LVL 7

    Expert Comment


    Is there any error message when you are trying to login ?
    Could it be that just clock is wrong in 2003 server or in 2012 server ?
    LVL 3

    Expert Comment

    So, the Server 2012 machine is the domain controller, and you cannot get logged on, correct?
    Are you using a domain admin account to log on?  The account you're using must be granted the right to log onto a DC

    The Server 2003 machine is a member server, and you can logon with a domain account, correct?
    LVL 1

    Author Comment

    It turns out, there was an error on the DC and it needed a simple reboot.  That error seemed to knock out AD and hence the other issues logging on with other admin or user accounts.  once server rebooted, all was good
    Thanks for all the suggestions
    I did use computer manager on the member server to connect (successfully) to the DC at could view the event log.
    LVL 1

    Author Closing Comment

    connecting via computer manager is a useful tool, it has come in handy for many years, thank you for the suggestion

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    PRTG Network Monitor: Intuitive Network Monitoring

    Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

    Table of Contents: Lesson 1 - Installing Windows Server 2012 ( (this article) Lesson 2 - …
    Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits y…
    In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now