Changed domain on a laptop, now can't login.

[Guest]

Hi,

I'm in over my head.

My friend wanted some large files copied to his laptop, and we thought that
hooking it up to my home network was the easiest way to do this.

The Laptop runs W2k and my home PC's run XP pro.

I changed the Laptop setting from his work domain to use my workgroup
MSHOME, then rebooted as suggested.

Now we cannot access the laptop at all, locally or across the network. None
of the user names or passwords seem to work. It does now show up in my
workgroup, but again none of the passwords work.

I haven't used w2k before (and it shows). How can I at least return the
laptop to how it was, and if it's not too difficult how can we share files
without this occuring again.

Thanks for any suggestions.

Peter.

 

[John John]

You will have to ask the domain administrator to rejoin you to the
domain. It's a simple thing for him/her to do.

John

 

[Guest]

Unfortunately, his work is closed down for the entire month of January so has
no support from them.

Is there any way I can at least access his drive across the network or
reverse my actions ?

Peter

 

[Paul Adare]

microsoft.public.win2000.security news group, =?Utf-8?B?

Is there any way I can at least access his drive across the network or
reverse my actions ?

Unless you know the local administrator password then no, you're SOL. As
far as reversing your actions, the only way to do that is to join the
system to the original domain again and to do that you need both local
administrative access and a connection to the domain.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
Ca·nadi·an (k-nd-n) adj. & n.
n: An educated, unarmed American with health care.

 

[Guest]

Thanks for the replies,

Unfortunately that was not the news I was looking for.

I tried to help, and now he has a laptop he can't use till February.

Thanks anyway.

Peter.

 

[Paul Adare]

microsoft.public.win2000.security news group, =?Utf-8?B?

Thanks for the replies,

Unfortunately that was not the news I was looking for.

I tried to help, and now he has a laptop he can't use till February.

Thanks anyway.

You can always try this:

http://home.eunet.no/~pnordahl/ntpasswd/

Your friend may wind up getting some significant grief when he goes back
to work.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
Ca·nadi·an (k-nd-n) adj. & n.
n: An educated, unarmed American with health care.

 

[Guest]

Thanks very much,

That did the trick, at least we can now access the laptop and even transfer
the files we orignally wanted to.

When I stuffed it up all I did was change from using a domain to using a
workgroup on the system screen. Should fixing it just be a matter of putting
the domain name back in? If so it doesn't appear to work for me. That's
either 1. because I have not used the correct domain name or 2. that is not
how to fix it.

If it is #1 is there anywhere on the laptop that this information may be
stored, or is there a rollback feature like on XP where you can undo stupid
things you have done in error. If it's #2 then pointing towards the correct
steps would be greatly appreciated.

Peter.

 

[Paul Adare]

microsoft.public.win2000.security news group, =?Utf-8?B?

When I stuffed it up all I did was change from using a domain to using a
workgroup on the system screen. Should fixing it just be a matter of putting
the domain name back in? If so it doesn't appear to work for me. That's
either 1. because I have not used the correct domain name or 2. that is not
how to fix it.

#2 unfortunately. In order to rejoin the laptop to the domain the laptop
has to be able to contact a domain controller over the network. Until
such time as you can get the laptop back on the original network you
won't be able to fix this.

If it is #1 is there anywhere on the laptop that this information may be
stored, or is there a rollback feature like on XP where you can undo stupid
things you have done in error. If it's #2 then pointing towards the correct
steps would be greatly appreciated.

See above.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
Ca·nadi·an (k-nd-n) adj. & n.
n: An educated, unarmed American with health care.

 

[Guest]

microsoft.public.win2000.security news group, =?Utf-8?B?


#2 unfortunately. In order to rejoin the laptop to the domain the laptop
has to be able to contact a domain controller over the network. Until
such time as you can get the laptop back on the original network you
won't be able to fix this.

He is a teleworker, and had VPN access to the network before I played with
his PC. Does this make any difference, are we able to re-join somehow?

Thanks,

Peter

 

[Paul Adare]

microsoft.public.win2000.security news group, =?Utf-8?B?

He is a teleworker, and had VPN access to the network before I played with
his PC. Does this make any difference, are we able to re-join somehow?

It is possible to join a domain through a VPN connection, I've done so
in the past. All I can suggest is that you try it.

1. Log on to the computer as the Administrator.
2. Connect the VPN using the user's domain credentials.
3. While connected, right-click My Computer, click Properties.
4. On the Computer Name tab (I think that's what it is named, don't have
a Windows 2000 box here) click Change.
5. Enter the domain name to be joined.
6. If prompted enter the user's domain credentials.


--
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain

 

[Roger Abell [MVP]]

He is a teleworker, and had VPN access to the network before I played with
his PC. Does this make any difference, are we able to re-join somehow?

While all that has been exchanged is totally correct, there are two
things not yet mentioned that may cause further issues.
- some vpn are set to authenticate using only the account then in use
which would mean you will not be able to get in
- often domain users have had their ability to join a machine to the
domain removed, meaning a designated account or domain admin
account wound be needed

Roger

 

[Paul Adare]

microsoft.public.win2000.security news group, Roger Abell [MVP]

While all that has been exchanged is totally correct, there are two
things not yet mentioned that may cause further issues.
- some vpn are set to authenticate using only the account then in use
which would mean you will not be able to get in
- often domain users have had their ability to join a machine to the
domain removed, meaning a designated account or domain admin
account wound be needed

Yup, a couple of good points which is why I said try it

--
It all began with Adam. He was the first man to tell a joke--or a lie.
How lucky Adam was. He knew when he said a good thing, nobody had said
it before. Adam was not alone in the Garden of Eden, however, and does
not deserve all the credit; much is due to Eve, the first woman, and
Satan, the first consultant." - Mark Twain