sbs 2011 administrator login is temporary profile

Hello,
I have an SBS 2011 domain controller that will not login properly.  I have renamed the folder in the c:\users folder.  I have deleted the profile under control panel - users - advanced.  Of course with all the related restarts and whatnots.  Same story.  
Another issue that may or may not be related is that I have Dcom 10009 errors logging 4 times for each system on the network in a round-robin fashion  every time I login to the server.  I have checked the protocols and the firewall entries and all looks well.  This is the exact error.  "Dcom was unable to communicate with the computer (computername) using any of the configured profiles.  All of the systems connect to the server fine and all of the applications run without incident.
Any help would be most appreciated.
LVL 1
4rgAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

WORKS2011Austin Tech CompanyCommented:
do you have another admin account you can logon with? I've seen this before and never had any luck restoring the profile. I had to log on with another admin account, delete the temp / failing account and recreate it.

If you don't have another admin account how does your backups look?
0
cpmcomputersCommented:
Dcom error is not related to your problem
(Most sbs2011 servers generate these and they are benign events)
You can supress them from the event log if required
0
DeepinInfrastructure Engineer Commented:
You will need to login with another admin account on the server, if you don't have one, create a temporary account  and follow the below

Click Start, type regedit in the Search box, and then press ENTER.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
Right-click the SID (you will see the profile path of the Administrators account) that you want to remove, and then click Delete.
Log on to the computer and create a new profile.
0
Introducing the "443 Security Simplified" Podcast

This new podcast puts you inside the minds of leading white-hat hackers and security researchers. Hosts Marc Laliberte and Corey Nachreiner turn complex security concepts into easily understood and actionable insights on the latest cyber security headlines and trends.

WORKS2011Austin Tech CompanyCommented:
As I mentioned, how are your backups? I would be extremely careful making changes to the registry without a backup.

It's likely you have an additional admin account for a service by chance maybe you didn't disable the actual administrator account and know the account info.
0
4rgAuthor Commented:
Thanks to everyone for answering.

To Works2011:  This is a server. You cannot delete the administrator account.  I had logged in with another account that has administrative rights and that is how I renamed the folder under c:\users and it is how I deleted the profile as mentioned in the question.  My backups are fine.  I agree that I don't want to delete the administrator SID but there has never been another administrator account on the local level for the server.  SBS2011 does not really allow you to make another Administrator account.  I mean at that level, right?  I never created a backup user account or anything like that.  There was only the one profile for the administrator on this machine.

To CPMcomputers:  Thanks for that bit of knowledge.  It is appreciated.

To Deepin:  I was able to delete the profile but it did not create a new one when I logged back in.  Machine still created a temp profile.
0
WORKS2011Austin Tech CompanyCommented:
To Works2011:  This is a server. You cannot delete the administrator account.
I didn't say delete the actual admin account I said the temp one. It can be deleted. As well for security reasons it's recommended all servers administrator account be disabled (not deleted). As well services are run under admin accounts, for example installing backup software. Do you know the name of the service you created to run the backup software under? Hopefully not the administrator account.

Just an FYI Microsoft recommends as a best practice disabling the administrator account. It's 50% of the process to attack in the username / password attack approach. As well having an additional admin account for things like this is a good practice, very few servers I've managed have had only one account to access.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
David AtkinTechnical DirectorCommented:
WORKS2011 is correct here.  Ideally the default Administrator account needs to be disabled anyway.  Create a new Network Administrator account via the SBS Console to replace it.  Check any services that are running under the old Administrator account and change them to the new admin account.
0
4rgAuthor Commented:
Thank you everyone.  It was not the default administrator account that I was using.  It was a XXXAdmin name but it was the account that was created upon setup of the server.  I don't think SBS2011 allows you to use the Administrator account.  In any case, I had tried to add an account under control panel-user accounts and that was a bust.  I did not think that adding it through AD was the way to go but apparently it was.  I added a new network administrator account and it allowed me to login with it.  (Though to be fair, I had tried to login with my own account (I am a network administrator also and always have one extra administrator account setup in case of a corrupted profile but that had the same issue as the first XXXAdmin account.  It had created a temp profile which is why I created this ticket  So why it worked now, I will never know and frankly do not care.)   It finally created a new profile and it's own folder under C:\users folder.  I need to do one more test and that would be logging in after a restart but the users are all up and running now.  I will get back to you all tonight hopefully after I can restart the server and will do my accounting then.  I really appreciate it.
0
4rgAuthor Commented:
Just my thanks to everyone for taking their time.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
IT Administration

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.