Solved

DC Looks to be hacked!

Posted on 2015-01-26
6
93 Views
Last Modified: 2015-01-26
I cannot login to Hyper-V host or any of the V- Servers via my normal AD Administrator Login. I'mm the one and only admin and client to my domain.
It has been several days since I attempted a login.
What is the procedure for resetting the admin lofin?
0
Comment
Question by:A_AmericanELectric
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
6 Comments
 
LVL 34

Accepted Solution

by:
Paul MacDonald earned 500 total points
ID: 40571471
Something smells fishy here.

Who hosts your host?  Can you not log in via Directory Services Recovery Mode?  Is there only one user account in the whole domain?  

You can always restore from backup...
0
 
LVL 34

Expert Comment

by:it_saige
ID: 40571504
Is your DC a VM?  Do you have any 2003 DC's in your domain?  What is the error you get?  Are you able to access your server after you restart it?

-saige-
0
 

Author Comment

by:A_AmericanELectric
ID: 40571756
S2012 R2, yes dc is Vm host is also member.can login through local machine but spitting back "Bad Password" with domain credentials
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:A_AmericanELectric
ID: 40571760
Who host my host?
Physical server is Hyper-V host and the server is sitting on the rack in front of me. Pretty much one user but you did remind me of another.

Let me try
0
 

Author Comment

by:A_AmericanELectric
ID: 40571774
paulmacd thank you for reminding me of my backup account. It logged me in and allowed me to reset admin password.
I then  did a gpupdate /force and its starting to aloow me access to my other VMs.

I still have no idea how this could have changed
0
 

Author Closing Comment

by:A_AmericanELectric
ID: 40571775
" Is there only one user account in the whole domain?  " Reminded me of my only failsafe
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question