cannot login to domain controlers

Hi, we have a domain with 2008 and 2003 domain controllers, we cannot now login remotely or locally to the domain controllers. We have a console open to 1 2008 DC. We think that a gpo may have been changed in error on one of the DC's. Anybody know how we can fix this. Have seen KDC and dcom errors in the event log. This is urgent :-(
padraic CarronIT SecurityAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Do you have access to GPOs from RSAT on a workstation that you can temporally remove GPOs until you locate the offending policy?

Do you have access to the event logs? Are there any entries that may indicate what is preventing your login?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Will SzymkowskiSenior Solution ArchitectCommented:
I would be checking the Default Domain Controllers Policy to and see when it was last modified and also check the settings to ensure nothing critical was changed.

Also what is the error message when you try to login to the domain controllers?

Also as stated already you should be able to completely administer the domain from RSAT on a workstation or a member server.

Although it is important to be able to login to the domain you should not have to in order to manage it.

padraic CarronIT SecurityAuthor Commented:
Got it working, not sure what caused the problem. Got logged into the console of one DC and was able to reset the domain admins password and were then able to run elevated cmd prompt tools. We ran gpupdate/force and repadmin /syncall. Then we rebooted all DC's, all access was returned ????
Have asked MS Support to investigate the cause but no reply yet.

Thanks for your help
I would at least save your server event logs before they're overwritten and comb them for anything you can find. Errors, logon/off times, etc. May even want to save the workstation logs as well.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.