Reboot SBS2011 box from a non-domain account on the same LAN

Small network with two servers. SBS 2011 & Server 2008.

Just today, nobody can log in remotely or get mail on any device.

The domain admin cannot login either. Gets invalid username or password message.

I can log on remotely to the Server 2008 box as the local admin, but of course that doesn't give me domain privileges.

I want to remotely reboot the SBS box. I've tried using shutdown.exe, but of course authentication fails.

Any suggestion as to how I might achieve this? I'll have physical access tomorrow but would love to solve this today.
snooflehammerAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Jeffrey Kane - TechSoEasyConnect With a Mentor Principal ConsultantCommented:
it should let you push the shutdown command to the remote machine with any admin account details.

You can't do it without having proper credentials.  And the SBS box does not have a local administrator account.  

Probably your only option at this point is to change the administrator password, but you won't be able to do that remotely unless the server has a DRAC (or similar) card.

Instructions to do this are here:  http://blog.scorpionsoft.com/blog/2012/04/crack-the-cred-episode-105-domain-controller.html
0
 
Jambon316Commented:
what about using psexec from the sysinternals.com site.

it should let you push the shutdown command to the remote machine with any admin account details.
0
 
snooflehammerAuthor Commented:
You couldn't provide the syntax by any chance?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
rindiCommented:
If the server has an iDRAC or ILO module which has been configured, you should be able to logon to that and then force a reboot of the server that way. But if that hasn't occurred to you yet, the server probably doesn't have such a module anyway, or it hasn't been configured for use.

So you would still have to go on site. But you could then configure the iDRAC or ILO or whatever your server model includes so you can use it in the future.
0
 
Jambon316Commented:
psexec syntax:

psexec \\(hostname or IP address of remote server) -i  -s "c:\windows\shutdown /r"

this sound make the remote server run "shutdown /r" as a system process in whatever session is running on the server.

you should run the command from an elevated command line , as far as I know you don't need domain admin rights as long as you've run the command from an admin command prompt.

let us know if it works for you or not
0
 
Jeffrey Kane - TechSoEasyConnect With a Mentor Principal ConsultantCommented:
as far as I know you don't need domain admin rights as long as you've run the command from an admin command prompt.

Won't work.  You definitely need Domain Admin rights to reboot a domain controller from psexec.
0
 
Jambon316Commented:
really? if you're running it as admin , using the switch tech to use the current session on the server + passing the command as a system process?  

I don't know for absolutely sure because this is not a situation I would ever be in, but I'm pretty confident that it can be done. it's not like the OP is swimming in choices here so it's worth giving it a go.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
You would have to be logged into that machine with an account that is a member of the domain admins group -- and if you are able to do that you are able to log into the server with that same account.

psexec doesn't do any more than what can be done with other commands like shutdown (which didn't work for him) where you can add a \\MACHINENAME parameter.
0
 
Scott SilvaNetwork AdministratorCommented:
And if the machine isn't accepting logins it is most likely stuck in an unstable state and nothing is going to respond except hitting the button...
0
 
Jambon316Commented:
yes if the machine is not accepting logins and it is not already logged in to a session then I agree, the only option really will be to button it.


how is this normally accessed, do you connect via RDP or do you use  3rd party software (team viewer, logmein etc)
0
 
snooflehammerAuthor Commented:
It's going to get buttoned this morning. Severely regretting not configuring ILO :(
0
 
snooflehammerAuthor Commented:
This could not be resolved without a manual reboot, so although they didn't answer the requirement to remotely force a reboot in this situation, I've accepted the two answers that best addressed the situation.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.