Announcement

Collapse
No announcement yet.

No admin access

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • No admin access

    Techs Gone Wild!

    Background info:
    W2K3 Domain
    WXP Computer

    So long story short, one of our techs (Tech 1) said he could lock everyone else out of his system. So he removed all logins from his local admin group except for his local and domain logins. While he was doing this, another tech (Tech 2) MMC'd to his PC via domain admin, and added back all the logins into the group, but removed Tech 1's domain login from the admin group.

    After reboot... both changes took affect. The only login with admin access was Tech 1's local login... which was disabled.

    Yeah, we're REAL smart lol.

    Anyway, we were using NT Password Reset CD to un-disable it, and to restore the other local admin accts, but the changes don't take effect in windows.

    Any suggestions, or is he screwed?


    One idea we had was to remove / add it back to the domain... but you need admin access to do so.

    Also, there are no logins in the power user group.
    Last edited by Wired; 19th September 2006, 23:27.
    ** Remember to give credit where credit is due and leave reputation points where appropriate **

  • #2
    Re: No admin access

    Perhaps an authoritative restore is in order.
    Regards,
    Jeremy

    Network Consultant/Engineer
    Baltimore - Washington area and beyond
    www.gma-cpa.com

    Comment


    • #3
      Re: No admin access

      Originally posted by JeremyW
      Perhaps an authoritative restore is in order.
      What is that exactly?
      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: No admin access

        http://technet2.microsoft.com/Window....mspx?mfr=true
        Sorry, but it's a long read
        Regards,
        Jeremy

        Network Consultant/Engineer
        Baltimore - Washington area and beyond
        www.gma-cpa.com

        Comment


        • #5
          Re: No admin access

          Authoritative Restore looks like it can only be used on a domain server itself.

          No worries, it's fixed. Re-enabling the local login didn't work with the utility because they were trying to re-enable it by the account name. Turns out the account was really just local admin acct renamed. They re-enabled it with the RID, and it worked fine. Admin access restored, everything else was cake to fix.

          Moral of this story:

          Don't mess with I.T., ESPECIALLY if you're in I.T.
          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment


          • #6
            Re: No admin access

            So this was just for one machine? It sounded like you had locked yourself out of the domain.
            Glad you got it resolved.
            Regards,
            Jeremy

            Network Consultant/Engineer
            Baltimore - Washington area and beyond
            www.gma-cpa.com

            Comment


            • #7
              Re: No admin access

              Yeah, I re-read the first post and edited for clarification. Yep, just one computer. We're not stupid enough to try out this stuff in AD
              ** Remember to give credit where credit is due and leave reputation points where appropriate **

              Comment

              Working...
              X