Home All Groups Group Topic Archive Search About

Admin Account is Disabled on domain server

Author
21 Jul 2005 1:39 PM
Herman
I did a real bone head move and accidently disabled my admin account access
in group policy while securing my server. I can no longer log on to the
server. I am the only administrator of this server. We are a small shop and
this is my domain controller and file server, print server.

Author
21 Jul 2005 1:41 PM
Herman
Any one with any Ideas how to get access back.

Show quoteHide quote
"Herman" wrote:

> I did a real bone head move and accidently disabled my admin account access
> in group policy while securing my server. I can no longer log on to the
> server. I am the only administrator of this server. We are a small shop and
> this is my domain controller and file server, print server.
Are all your drivers up to date? click for free checkup

Author
21 Jul 2005 2:26 PM
SimonE
try this microsoft kb article:

http://support.microsoft.com/default.aspx?scid=kb;en-us;814777



Show quoteHide quote
"Herman" wrote:

> Any one with any Ideas how to get access back.
>
> "Herman" wrote:
>
> > I did a real bone head move and accidently disabled my admin account access
> > in group policy while securing my server. I can no longer log on to the
> > server. I am the only administrator of this server. We are a small shop and
> > this is my domain controller and file server, print server.
Author
21 Jul 2005 2:48 PM
Herman
I can get in using safe mode but I cant get in to the group policy management
..
Any other Ideas

Thanks for the Info

Show quoteHide quote
"SimonE" wrote:

> try this microsoft kb article:
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;814777
>
>
>
> "Herman" wrote:
>
> > Any one with any Ideas how to get access back.
> >
> > "Herman" wrote:
> >
> > > I did a real bone head move and accidently disabled my admin account access
> > > in group policy while securing my server. I can no longer log on to the
> > > server. I am the only administrator of this server. We are a small shop and
> > > this is my domain controller and file server, print server.
Author
21 Jul 2005 2:56 PM
SimonE
Can you create another admin account whilst in safe mode?

Show quoteHide quote
"Herman" wrote:

> I can get in using safe mode but I cant get in to the group policy management
> .
> Any other Ideas
>
> Thanks for the Info
>
> "SimonE" wrote:
>
> > try this microsoft kb article:
> >
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;814777
> >
> >
> >
> > "Herman" wrote:
> >
> > > Any one with any Ideas how to get access back.
> > >
> > > "Herman" wrote:
> > >
> > > > I did a real bone head move and accidently disabled my admin account access
> > > > in group policy while securing my server. I can no longer log on to the
> > > > server. I am the only administrator of this server. We are a small shop and
> > > > this is my domain controller and file server, print server.
Author
21 Jul 2005 3:02 PM
Herman
Cant get to any AD resources like AD User And Computer . Domain controlers
dont have users and computers locally under manage

Show quoteHide quote
"SimonE" wrote:

> Can you create another admin account whilst in safe mode?
>
> "Herman" wrote:
>
> > I can get in using safe mode but I cant get in to the group policy management
> > .
> > Any other Ideas
> >
> > Thanks for the Info
> >
> > "SimonE" wrote:
> >
> > > try this microsoft kb article:
> > >
> > > http://support.microsoft.com/default.aspx?scid=kb;en-us;814777
> > >
> > >
> > >
> > > "Herman" wrote:
> > >
> > > > Any one with any Ideas how to get access back.
> > > >
> > > > "Herman" wrote:
> > > >
> > > > > I did a real bone head move and accidently disabled my admin account access
> > > > > in group policy while securing my server. I can no longer log on to the
> > > > > server. I am the only administrator of this server. We are a small shop and
> > > > > this is my domain controller and file server, print server.
Author
21 Jul 2005 3:16 PM
SimonE
Sorry can't help if none of the following covers the issue, don't have a w2k3
DC in front of me, can only offer the advise:

1. Start your computer in to Safe mode with networking support.
2. Log on as the administrator.
3. Start the Active Directory Users and Computers snap-in, expand Local
Users and Groups, and then expand Users.
4. Right-click Administrator, and then click Enable Account.
5. Restart your computer.

and extract from
http://www.microsoft.com/uk/businesscentral/issues/sgc/articles/sec_ad_admin_groups.mspx#EFAA

Protecting the Administrator Account
Every installation of Active Directory has an account named Administrator in
each domain. This account cannot be deleted or locked out. In Windows Server
2003, the Administrator account can be disabled, but it is automatically
re-enabled when you start the computer in Safe Mode.

Simon

Show quoteHide quote
"Herman" wrote:

> Cant get to any AD resources like AD User And Computer . Domain controlers
> dont have users and computers locally under manage
>
> "SimonE" wrote:
>
> > Can you create another admin account whilst in safe mode?
> >
> > "Herman" wrote:
> >
> > > I can get in using safe mode but I cant get in to the group policy management
> > > .
> > > Any other Ideas
> > >
> > > Thanks for the Info
> > >
> > > "SimonE" wrote:
> > >
> > > > try this microsoft kb article:
> > > >
> > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;814777
> > > >
> > > >
> > > >
> > > > "Herman" wrote:
> > > >
> > > > > Any one with any Ideas how to get access back.
> > > > >
> > > > > "Herman" wrote:
> > > > >
> > > > > > I did a real bone head move and accidently disabled my admin account access
> > > > > > in group policy while securing my server. I can no longer log on to the
> > > > > > server. I am the only administrator of this server. We are a small shop and
> > > > > > this is my domain controller and file server, print server.
Author
21 Jul 2005 4:06 PM
Herman
I was using safe mode not Safe mode with networking support

That fixed my problem

Thanks you have been very helpful

Show quoteHide quote
"SimonE" wrote:

> Sorry can't help if none of the following covers the issue, don't have a w2k3
> DC in front of me, can only offer the advise:
>
> 1. Start your computer in to Safe mode with networking support.
> 2. Log on as the administrator.
> 3. Start the Active Directory Users and Computers snap-in, expand Local
> Users and Groups, and then expand Users.
> 4. Right-click Administrator, and then click Enable Account.
> 5. Restart your computer.
>
> and extract from
>
> http://www.microsoft.com/uk/businesscentral/issues/sgc/articles/sec_ad_admin_groups.mspx#EFAA
>
> Protecting the Administrator Account
> Every installation of Active Directory has an account named Administrator in
> each domain. This account cannot be deleted or locked out. In Windows Server
> 2003, the Administrator account can be disabled, but it is automatically
> re-enabled when you start the computer in Safe Mode.
>
> Simon
>
> "Herman" wrote:
>
> > Cant get to any AD resources like AD User And Computer . Domain controlers
> > dont have users and computers locally under manage
> >
> > "SimonE" wrote:
> >
> > > Can you create another admin account whilst in safe mode?
> > >
> > > "Herman" wrote:
> > >
> > > > I can get in using safe mode but I cant get in to the group policy management
> > > > .
> > > > Any other Ideas
> > > >
> > > > Thanks for the Info
> > > >
> > > > "SimonE" wrote:
> > > >
> > > > > try this microsoft kb article:
> > > > >
> > > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;814777
> > > > >
> > > > >
> > > > >
> > > > > "Herman" wrote:
> > > > >
> > > > > > Any one with any Ideas how to get access back.
> > > > > >
> > > > > > "Herman" wrote:
> > > > > >
> > > > > > > I did a real bone head move and accidently disabled my admin account access
> > > > > > > in group policy while securing my server. I can no longer log on to the
> > > > > > > server. I am the only administrator of this server. We are a small shop and
> > > > > > > this is my domain controller and file server, print server.
Author
26 Feb 2007 9:18 AM
Radioman
Hi all..

I made the same IDIOT FOOL mistake

BUT THIS ARTICLE IS an absolute LIFE SAVER !!!!!!!!!!!!!!!!!!!
PLEASE can you make it a sticky.

It got me going as well .. I was faced with the nightmare of reinstallation
on a running DNS server and domain controller.. and total reconfiguration.

THIS KB article is the key:
http://support.microsoft.com/default.aspx?scid=kb;en-us;814777

MANY MANY thanks !!

Show quoteHide quote
"Herman" wrote:

>
> I was using safe mode not Safe mode with networking support
>
> That fixed my problem
>
> Thanks you have been very helpful
>
> "SimonE" wrote:
>
> > Sorry can't help if none of the following covers the issue, don't have a w2k3
> > DC in front of me, can only offer the advise:
> >
> > 1. Start your computer in to Safe mode with networking support.
> > 2. Log on as the administrator.
> > 3. Start the Active Directory Users and Computers snap-in, expand Local
> > Users and Groups, and then expand Users.
> > 4. Right-click Administrator, and then click Enable Account.
> > 5. Restart your computer.
> >
> > and extract from
> >
> > http://www.microsoft.com/uk/businesscentral/issues/sgc/articles/sec_ad_admin_groups.mspx#EFAA
> >
> > Protecting the Administrator Account
> > Every installation of Active Directory has an account named Administrator in
> > each domain. This account cannot be deleted or locked out. In Windows Server
> > 2003, the Administrator account can be disabled, but it is automatically
> > re-enabled when you start the computer in Safe Mode.
> >
> > Simon
> >
> > "Herman" wrote:
> >
> > > Cant get to any AD resources like AD User And Computer . Domain controlers
> > > dont have users and computers locally under manage
> > >
> > > "SimonE" wrote:
> > >
> > > > Can you create another admin account whilst in safe mode?
> > > >
> > > > "Herman" wrote:
> > > >
> > > > > I can get in using safe mode but I cant get in to the group policy management
> > > > > .
> > > > > Any other Ideas
> > > > >
> > > > > Thanks for the Info
> > > > >
> > > > > "SimonE" wrote:
> > > > >
> > > > > > try this microsoft kb article:
> > > > > >
> > > > > > http://support.microsoft.com/default.aspx?scid=kb;en-us;814777
> > > > > >
> > > > > >
> > > > > >
> > > > > > "Herman" wrote:
> > > > > >
> > > > > > > Any one with any Ideas how to get access back.
> > > > > > >
> > > > > > > "Herman" wrote:
> > > > > > >
> > > > > > > > I did a real bone head move and accidently disabled my admin account access
> > > > > > > > in group policy while securing my server. I can no longer log on to the
> > > > > > > > server. I am the only administrator of this server. We are a small shop and
> > > > > > > > this is my domain controller and file server, print server.

Bookmark and Share