Help - recovering from disgruntled admin

[bam Bino]

Hi,

I've taken over the office network,

I am admin.

win2k server and 6 workstations.

The workstations have dropped out of the domain.
I can ping fom the server, but I am not allowed to login from the
workstation terminals - Not to the workstation locally or to the domain.

How can I bring these computers back on board.

thank youi so much

 

[bam Bino]

also, I can ping them all, and I can see them all in net view.
When I hit run \\thatMachine I get al login, but I will never guess the
password.

Seems like the doman was reconfigured.
On the server , under "computer" I only have 2 computers in the list.

!thanks

 

[Phillip Windell]

Do the workstations still show up on the Server in "Active Directory Users
and Computers"? You can reset the local Admin passwords (or any other
password) on the workstations from the Server using this.

 

[bam Bino]

No, they do not show up in the list.

Only 2 computers show up there.
These 2 are accessible thru UNC- i think they are ok

I added another for a test: \\computer2 which is a real computer I am
having trouble with.

How do I reset it?

I right-clicked on that computer name and chose reset, but what does that
even mean?
I never got a chance to enter a password.

 

[Phillip Windell]

I right-clicked on that computer name and chose reset, but what does that
even mean?
I never got a chance to enter a password.

It doesn't do what you think. It now means that machine must be rejoined to
the Domain. Make it a workgroup machine first then rejoin it. You'll
probably have to do the rest with the others that are messed up too. You
must come up with the local Admin credentials for the workstations to do
this, there is no "shortcut".

 

[bam Bino]

thanks
linNT
?

It doesn't do what you think. It now means that machine must be rejoined to
the Domain. Make it a workgroup machine first then rejoin it. You'll
probably have to do the rest with the others that are messed up too. You
must come up with the local Admin credentials for the workstations to do
this, there is no "shortcut".

 

[bam Bino]

Then where do I reset the local admin's passwords from he AD console?

 

[Nitesh Kumar Pathak]

You can not reset the local admin password from AD console.
Try the following:

take a Identical machine to all your machines Install it
with the operating system (2k/XP pro). Create its ERD.

Then go to one of your machines run the Repair wizard
using the Win2K/WinXp-Pro CD-rom---> Opt for the manual
repair using ERD. insert this ERD when Prompted.Manually
try all the three options one by one.
then Reboot the system and when prompted for Local
Administrator's password supply the local administrator's
password of the newly installed machine whose ERD has been
used.

NOTE:- Don't go for automatic repair.

Hope it will help you.

 

[bam Bino]

hmm, thanks

You can not reset the local admin password from AD console.
Try the following:

take a Identical machine to all your machines Install it
with the operating system (2k/XP pro). Create its ERD.

Then go to one of your machines run the Repair wizard
using the Win2K/WinXp-Pro CD-rom---> Opt for the manual
repair using ERD. insert this ERD when Prompted.Manually
try all the three options one by one.
then Reboot the system and when prompted for Local
Administrator's password supply the local administrator's
password of the newly installed machine whose ERD has been
used.

NOTE:- Don't go for automatic repair.

Hope it will help you.

 

[f/f george]

You could try this too:
http://home.eunet.no/~pnordahl/ntpasswd/
Lets you reset the password of anyone on a machine

This one does the same thing:
http://www.lostpassword.com/windows-xp-2000-nt.htm
except is specifically mentions admin passwords

here too:
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

I put "reset windows 2000 password" no quotes in a Yahoo search and
came up with about 754,000 possible solutions

 

[Phillip Windell]

You can not reset the local admin password from AD console.
Try the following:

Yes you can. I reset everyone all of our machines that way. Right-click on
the machine in "AD Users and Computers", select "Manage", go to "Local Users
and Groups", choose Users, right-click on the Administrator account, Select
"Set Password".

The only way it won't work is if the machine is no longer a proper member of
the Domain or if someone has removed Domian Admins from the local
Administrator's Group.

Now for the machines that no longer appear as members of the domain and
probably aren't accessable,... then the ERD is probably the way to go, but
it might be just a quick to wipe it and reload it from scratch depending
what is on it.