Solved

Cannot Login to EC2 Instance As Local User After Joining SimpleAD Directory Service in AWS

Posted on 2016-09-21
4
52 Views
Last Modified: 2016-09-22
I have an EC2 Windows 2012 r2 instance that is joined to Directory Services (SimpleAD directory).

Before joining the server to my SimpleAD I was able to login as the local Administrator yesterday.

I have created a local administrative user but I cannot login as that User. I can login as a Domain Administrator, but not locally. Obviously this is different than yesterday.

I've tried several things, including omitting the domain name when attempting to RDP and adding
.\ 

Open in new window

before the user name.

The error I am getting is "Login Attempt Failed".

I have not changed any Group Policy.

Any suggestions on how I can login to the machine as a local user?

Thanks for your help.
0
Comment
Question by:Tessando
  • 2
  • 2
4 Comments
 
LVL 5

Expert Comment

by:sAMAccountName
Comment Utility
Have you tried recovering the local adminsitrator password through the AWS console?  If you view your instances in the EC2 console, you should be able to right-click it and get the password.

If that password doesn't work, you should be able to log on to the instance using the Administrator account you have been provided via SImpleAD.  Using that account, you should be able to RDP to the EC2 instance you joined and reset its local administrator password.
0
 

Author Comment

by:Tessando
Comment Utility
Thank you, but that's not the issue. I have the Administrator password. What's really happening is that when this server was connected to a Domain, I couldn't login as any local user.

Update --->

To resolve this, I removed the computer from the Domain and associated it with a temporary Workgroup. I was then able to login locally. I then logged back out and in as the local account again, adding the machine to the Domain.

My best guess is that this has something to do with SimpleAD (Directory Service from AWS). I'm going to leave this up for the rest of the day to see if someone else has experienced this as well and, if so, what the fix was.
0
 
LVL 5

Accepted Solution

by:
sAMAccountName earned 500 total points
Comment Utility
Thats probably useful information for the AWS Directory Services team and Id suggest you forward that behavior along through the forum posts, which do get read by that team.

SimpleAD is Samba directory services in the back end and some of the behavior it exhibits is odd.  This looks like something they might be able to code around and I suspect you arent the only one this has happened to.
0
 

Author Closing Comment

by:Tessando
Comment Utility
Great suggestion. I will let AWS know. Thank you.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

With the spotlight very much on Cloud technology within the IT industry, it’s difficult to avoid the topic these days. Due to the constant flood of new information, added pressure, emphasis and focus on cloud migration is driving corporations to inv…
AWS Glacier is Amazons cheapest storage option and is their answer to a ‘Cold’ storage service.  Customers primarily use this service for archival purposes and storage of infrastructure backups.  Its unlimited storage potential and low storage cost …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now