GreyHippo
asked on
Problem logging into to Windows Server 2003 using domain admin account
When I tried logging into my server using the domain\administrator account I got a message about a temporary user profile. So I followed this procedure
http://www.sysads.co.uk/2012/11/you-are-logged-into-a-temporary-profile-in-windows-server-2008-r2/
I inadvertently deleted the wrong key so now I get a new error message when I try to login, "The User Profile Service service failed the logon. User profile cannot be loaded" and i can not login using my domain\administrator account. I can login using another account which is in the domain admins group but for some reason I don;t get access to some of the folders.
How can I fix my server to login using the domain\administrator account?
http://www.sysads.co.uk/2012/11/you-are-logged-into-a-temporary-profile-in-windows-server-2008-r2/
I inadvertently deleted the wrong key so now I get a new error message when I try to login, "The User Profile Service service failed the logon. User profile cannot be loaded" and i can not login using my domain\administrator account. I can login using another account which is in the domain admins group but for some reason I don;t get access to some of the folders.
How can I fix my server to login using the domain\administrator account?
ASKER
Its a domain controller.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes, there is another domain controller. How can I tell which has FSMO roles? I do have backups.
ASKER
Is there any way I can restore the registry key from a backup?
ASKER
A different domain controller handles FSMO roles
Here's how to determine which DCs have which FSMO roles.
I don't know of any way to restore JUST the registry from a Windows backup. It's possible to export the registry settings and save them as a file. I recommend you do that before making any changes in the future.
I don't know of any way to restore JUST the registry from a Windows backup. It's possible to export the registry settings and save them as a file. I recommend you do that before making any changes in the future.
Hi,
if you can log to your server using a domain admin account, even if you don't have access to all folders, can you have the rights with this account to give another account all the domain rights? if yes and if that suits you could probably avoid a major restore operation on your only dc.
As this is a win2003 server I guess there is a chance that you get rid of it soon. If not you should because microsoft support is ending this year.
Also I don't know if restoring a single key from backup is possible, and even more for a dc.. I am pessimist on this one... but maybe.
If my firt step is not acceptable for you, you should demote and promote again the server as past comments suggest, as you have another dc with fsmo roles (check all roles).
If all solutions does not satisfy you, maybe you should go with an AD restore, as past comments suggest, but don't forget that you will loose your AD changes since your backup.
if you can log to your server using a domain admin account, even if you don't have access to all folders, can you have the rights with this account to give another account all the domain rights? if yes and if that suits you could probably avoid a major restore operation on your only dc.
As this is a win2003 server I guess there is a chance that you get rid of it soon. If not you should because microsoft support is ending this year.
Also I don't know if restoring a single key from backup is possible, and even more for a dc.. I am pessimist on this one... but maybe.
If my firt step is not acceptable for you, you should demote and promote again the server as past comments suggest, as you have another dc with fsmo roles (check all roles).
If all solutions does not satisfy you, maybe you should go with an AD restore, as past comments suggest, but don't forget that you will loose your AD changes since your backup.
ASKER
I will try the to demote the server using DCPROMO tonight after all users have gone home.
ASKER
I am guessing that once I demote / promote the server, it will generate new registry keys for the domain administrator. Is this correct?
Since all that information comes from the domain, I would expect so, yes.
Then promise on a stack of MCP manuals you'll stop hacking the registry without making a backup.