Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » All accounts locked 2003r2 domain, help
All accounts locked 2003r2 domain, help [message #363620] Sat, 09 January 2010 12:42 Go to next message
glovato  is currently offline glovato  Argentina
Messages: 26
Registered: July 2009
Junior Member
Some hours after a migration from NT4 to 2003 interim we found out that all
the domain admin accounts are LOCKED and that a specific workstation was the
culprit of the locks(too late for that).

even te sealed "administrator" domain admin account was locked up.

How can i unlock the accounts if i don't have anymore administrative
accounts?

the DCs are 2003 R2
Re: All accounts locked 2003r2 domain, help [message #363628 is a reply to message #363620] Sat, 09 January 2010 13:04 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Guillermo,

The default domain administrator account should unlock at that moment when
the correct password is used, see also:
http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The- Default-domain-administrator-account-is-locked_21003F00_.asp x

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Some hours after a migration from NT4 to 2003 interim we found out
> that all the domain admin accounts are LOCKED and that a specific
> workstation was the culprit of the locks(too late for that).
>
> even te sealed "administrator" domain admin account was locked up.
>
> How can i unlock the accounts if i don't have anymore administrative
> accounts?
>
> the DCs are 2003 R2
>
Re: All accounts locked 2003r2 domain, help [message #363639 is a reply to message #363628] Sat, 09 January 2010 13:26 Go to previous messageGo to next message
glovato  is currently offline glovato  Argentina
Messages: 26
Registered: July 2009
Junior Member
Interesting,
the qeird part is that the user on site reported that when he used the
sealed password, the system asked for a password change due to expired
password and then failed the change because it was locked out.
i don't know if the user tried again after that but i'm giving him
instructions on the matter

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911dbfd78cc5f866f53cac7@msnews.microsoft.com...
> Hello Guillermo,
>
> The default domain administrator account should unlock at that moment when
> the correct password is used, see also:
> http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The- Default-domain-administrator-account-is-locked_21003F00_.asp x
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Some hours after a migration from NT4 to 2003 interim we found out
>> that all the domain admin accounts are LOCKED and that a specific
>> workstation was the culprit of the locks(too late for that).
>>
>> even te sealed "administrator" domain admin account was locked up.
>>
>> How can i unlock the accounts if i don't have anymore administrative
>> accounts?
>>
>> the DCs are 2003 R2
>>
>
>
Re: All accounts locked 2003r2 domain, help [message #363642 is a reply to message #363628] Sat, 09 January 2010 13:30 Go to previous messageGo to next message
glovato  is currently offline glovato  Argentina
Messages: 26
Registered: July 2009
Junior Member
Indeed, it fails like i've said before, asks for password change

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911dbfd78cc5f866f53cac7@msnews.microsoft.com...
> Hello Guillermo,
>
> The default domain administrator account should unlock at that moment when
> the correct password is used, see also:
> http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The- Default-domain-administrator-account-is-locked_21003F00_.asp x
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Some hours after a migration from NT4 to 2003 interim we found out
>> that all the domain admin accounts are LOCKED and that a specific
>> workstation was the culprit of the locks(too late for that).
>>
>> even te sealed "administrator" domain admin account was locked up.
>>
>> How can i unlock the accounts if i don't have anymore administrative
>> accounts?
>>
>> the DCs are 2003 R2
>>
>
>
Re: All accounts locked 2003r2 domain, help [message #363651 is a reply to message #363639] Sat, 09 January 2010 13:58 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Guillermo,

You can try this way, of course with a backup before, to see if the password
change also unlocks the account:
http://www.nobodix.org/seb/win2003_adminpass.html

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Interesting,
> the qeird part is that the user on site reported that when he used the
> sealed password, the system asked for a password change due to expired
> password and then failed the change because it was locked out.
> i don't know if the user tried again after that but i'm giving him
> instructions on the matter
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911dbfd78cc5f866f53cac7@msnews.microsoft.com...
>
>> Hello Guillermo,
>>
>> The default domain administrator account should unlock at that moment
>> when
>>
>> the correct password is used, see also:
>>
>> http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The- Default-d
>> omain-administrator-account-is-locked_21003F00_.aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Some hours after a migration from NT4 to 2003 interim we found out
>>> that all the domain admin accounts are LOCKED and that a specific
>>> workstation was the culprit of the locks(too late for that).
>>>
>>> even te sealed "administrator" domain admin account was locked up.
>>>
>>> How can i unlock the accounts if i don't have anymore administrative
>>> accounts?
>>>
>>> the DCs are 2003 R2
>>>
Re: All accounts locked 2003r2 domain, help [message #363652 is a reply to message #363639] Sat, 09 January 2010 13:58 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Guillermo,

If the password change doesn't help, then i think you can only use a system
state backup to restore to the time when the domain administrator wasn't
locked out.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Interesting,
> the qeird part is that the user on site reported that when he used the
> sealed password, the system asked for a password change due to expired
> password and then failed the change because it was locked out.
> i don't know if the user tried again after that but i'm giving him
> instructions on the matter
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911dbfd78cc5f866f53cac7@msnews.microsoft.com...
>
>> Hello Guillermo,
>>
>> The default domain administrator account should unlock at that moment
>> when
>>
>> the correct password is used, see also:
>>
>> http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The- Default-d
>> omain-administrator-account-is-locked_21003F00_.aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Some hours after a migration from NT4 to 2003 interim we found out
>>> that all the domain admin accounts are LOCKED and that a specific
>>> workstation was the culprit of the locks(too late for that).
>>>
>>> even te sealed "administrator" domain admin account was locked up.
>>>
>>> How can i unlock the accounts if i don't have anymore administrative
>>> accounts?
>>>
>>> the DCs are 2003 R2
>>>
Re: All accounts locked 2003r2 domain, help [message #363762 is a reply to message #363651] Sat, 09 January 2010 16:33 Go to previous messageGo to next message
glovato  is currently offline glovato  Argentina
Messages: 26
Registered: July 2009
Junior Member
Meinolf,
i did a password change using DSRM and an article in petri website that's
like the one you sent me, after that the logon proceeded.

It seems the autounlock feature of the administrator account DOES NOT work
if the account is flagged for a password change...

after that we did a backup :D

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911dbfe18cc5f8df376580b@msnews.microsoft.com...
> Hello Guillermo,
>
> You can try this way, of course with a backup before, to see if the
> password change also unlocks the account:
> http://www.nobodix.org/seb/win2003_adminpass.html
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Interesting,
>> the qeird part is that the user on site reported that when he used the
>> sealed password, the system asked for a password change due to expired
>> password and then failed the change because it was locked out.
>> i don't know if the user tried again after that but i'm giving him
>> instructions on the matter
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:6cb2911dbfd78cc5f866f53cac7@msnews.microsoft.com...
>>
>>> Hello Guillermo,
>>>
>>> The default domain administrator account should unlock at that moment
>>> when
>>>
>>> the correct password is used, see also:
>>>
>>> http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The- Default-d
>>> omain-administrator-account-is-locked_21003F00_.aspx
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Some hours after a migration from NT4 to 2003 interim we found out
>>>> that all the domain admin accounts are LOCKED and that a specific
>>>> workstation was the culprit of the locks(too late for that).
>>>>
>>>> even te sealed "administrator" domain admin account was locked up.
>>>>
>>>> How can i unlock the accounts if i don't have anymore administrative
>>>> accounts?
>>>>
>>>> the DCs are 2003 R2
>>>>
>
>
Re: All accounts locked 2003r2 domain, help [message #363993 is a reply to message #363762] Sat, 09 January 2010 23:10 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Guillermo,

The way in the article doesn't meant the DSRM password it is for the domain
administrator, which is a different one.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinolf,
> i did a password change using DSRM and an article in petri website
> that's
> like the one you sent me, after that the logon proceeded.
> It seems the autounlock feature of the administrator account DOES NOT
> work if the account is flagged for a password change...
>
> after that we did a backup :D
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911dbfe18cc5f8df376580b@msnews.microsoft.com...
>
>> Hello Guillermo,
>>
>> You can try this way, of course with a backup before, to see if the
>> password change also unlocks the account:
>> http://www.nobodix.org/seb/win2003_adminpass.html
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Interesting,
>>> the qeird part is that the user on site reported that when he used
>>> the
>>> sealed password, the system asked for a password change due to
>>> expired
>>> password and then failed the change because it was locked out.
>>> i don't know if the user tried again after that but i'm giving him
>>> instructions on the matter
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:6cb2911dbfd78cc5f866f53cac7@msnews.microsoft.com...
>>>> Hello Guillermo,
>>>>
>>>> The default domain administrator account should unlock at that
>>>> moment when
>>>>
>>>> the correct password is used, see also:
>>>>
>>>> http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The- Default
>>>> -d omain-administrator-account-is-locked_21003F00_.aspx
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Some hours after a migration from NT4 to 2003 interim we found out
>>>>> that all the domain admin accounts are LOCKED and that a specific
>>>>> workstation was the culprit of the locks(too late for that).
>>>>>
>>>>> even te sealed "administrator" domain admin account was locked up.
>>>>>
>>>>> How can i unlock the accounts if i don't have anymore
>>>>> administrative accounts?
>>>>>
>>>>> the DCs are 2003 R2
>>>>>
Re: All accounts locked 2003r2 domain, help [message #365440 is a reply to message #363642] Mon, 11 January 2010 15:10 Go to previous message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi
Are you talking about default Administrator or other user with the same
rights and group membership?

--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.




"Guillermo G. Lovato" <glovato@gmail.com> wrote in message
news:uWv$YqWkKHA.5520@TK2MSFTNGP06.phx.gbl...
> Indeed, it fails like i've said before, asks for password change
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911dbfd78cc5f866f53cac7@msnews.microsoft.com...
>> Hello Guillermo,
>>
>> The default domain administrator account should unlock at that moment
>> when the correct password is used, see also:
>> http://blogs.dirteam.com/blogs/jorge/archive/2006/10/05/The- Default-domain-administrator-account-is-locked_21003F00_.asp x
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Some hours after a migration from NT4 to 2003 interim we found out
>>> that all the domain admin accounts are LOCKED and that a specific
>>> workstation was the culprit of the locks(too late for that).
>>>
>>> even te sealed "administrator" domain admin account was locked up.
>>>
>>> How can i unlock the accounts if i don't have anymore administrative
>>> accounts?
>>>
>>> the DCs are 2003 R2
>>>
>>
>>
>
>
Previous Topic:2008 DC
Next Topic:Windows cannot obtain the domain controller name for your computer network. (The specified domain e
Goto Forum:
  


Current Time: Tue Jan 23 16:21:49 MST 2018

Total time taken to generate the page: 0.19965 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software