computer accounts disappear from A.D.

  • Thread starter Thread starter Theo Welles
  • Start date Start date
T

Theo Welles

Hi all!

Some users are no longer able to logon to the domain. When I look into A.D.
Users and Computers I see that their computer account has disappeared. The
computers are Win2k professional in Win2k domain.
What causes this and how can I fix it?

Thanks!!!
 
Theo,

I would verify the accounts were not moved into another OU. If they are not
contained in the directory, the computers were either removed from the
domain by the users or an admin has removed the account from dsa.msc. None
of these actions happen automatically.

Steve Dodson [MSFT]
Directory Services

--------------------
From: "Theo Welles" <[email protected]>
Subject: computer accounts disappear from A.D.
Date: Mon, 20 Oct 2003 12:04:34 -0500
Lines: 11
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <[email protected]>
Newsgroups: microsoft.public.win2000.active_directory
NNTP-Posting-Host: dalexch.jpi.com 206.50.227.3
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:52486
X-Tomcat-NG: microsoft.public.win2000.active_directory

Hi all!

Some users are no longer able to logon to the domain. When I look into A.D.
Users and Computers I see that their computer account has disappeared. The
computers are Win2k professional in Win2k domain.
What causes this and how can I fix it?

Thanks!!!
Click to expand...


--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
Hi Steve,

thanks a lot for your answer.

I tend to exclude that some administrator deleted the entries.... I am one
of them and the other guys here say they did not.....

Is it possible that some form of A.D. database (LDAP?)
corruption/incosistency is occurring??

What tools should I use to test the integrity of my A.D.database?
NTDSUTIL??? with what sequence of commands???

Thanks again!!!!

Theo
Steve Dodson said:
Theo,

I would verify the accounts were not moved into another OU. If they are not
contained in the directory, the computers were either removed from the
domain by the users or an admin has removed the account from dsa.msc. None
of these actions happen automatically.

Steve Dodson [MSFT]
Directory Services

--------------------
From: "Theo Welles" <[email protected]>
Subject: computer accounts disappear from A.D.
Date: Mon, 20 Oct 2003 12:04:34 -0500
Lines: 11
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <[email protected]>
Newsgroups: microsoft.public.win2000.active_directory
NNTP-Posting-Host: dalexch.jpi.com 206.50.227.3
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:52486
X-Tomcat-NG: microsoft.public.win2000.active_directory

Hi all!

Some users are no longer able to logon to the domain. When I look into A.D.
Users and Computers I see that their computer account has disappeared. The
computers are Win2k professional in Win2k domain.
What causes this and how can I fix it?

Thanks!!!
Click to expand...


--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Click to expand...
 
Theo,

We usually see other wierdness with corrupt databases, but it could be a
possibility. Another option is that someone malicious has been removing the
accounts in AD.

To check for database problems:

315136 HOW TO: Complete a Semantic Database Analysis for the Active
Directory
http://support.microsoft.com/?id=315136

Otherwise I would look at auditing, etc.

Hope that helps!

Steve Dodson [MSFT]
Directory Services


--------------------
From: "Theo Welles" <[email protected]>
References: <[email protected]>
Click to expand...
Subject: Re: computer accounts disappear from A.D.
Date: Mon, 20 Oct 2003 17:04:43 -0500
Lines: 75
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <[email protected]>
Newsgroups: microsoft.public.win2000.active_directory
NNTP-Posting-Host: dalexch.jpi.com 206.50.227.3
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:52535
X-Tomcat-NG: microsoft.public.win2000.active_directory

Hi Steve,

thanks a lot for your answer.

I tend to exclude that some administrator deleted the entries.... I am one
of them and the other guys here say they did not.....

Is it possible that some form of A.D. database (LDAP?)
corruption/incosistency is occurring??

What tools should I use to test the integrity of my A.D.database?
NTDSUTIL??? with what sequence of commands???

Thanks again!!!!

Theo
Steve Dodson said:
Theo,

I would verify the accounts were not moved into another OU. If they are not
contained in the directory, the computers were either removed from the
domain by the users or an admin has removed the account from dsa.msc. None
of these actions happen automatically.

Steve Dodson [MSFT]
Directory Services

--------------------
From: "Theo Welles" <[email protected]>
Subject: computer accounts disappear from A.D.
Date: Mon, 20 Oct 2003 12:04:34 -0500
Lines: 11
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <[email protected]>
Newsgroups: microsoft.public.win2000.active_directory
NNTP-Posting-Host: dalexch.jpi.com 206.50.227.3
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:52486
X-Tomcat-NG: microsoft.public.win2000.active_directory

Hi all!

Some users are no longer able to logon to the domain. When I look into A.D.
Users and Computers I see that their computer account has disappeared. The
computers are Win2k professional in Win2k domain.
What causes this and how can I fix it?

Thanks!!!
Click to expand...


--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Click to expand...
Click to expand...


--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
I once saw a similar issue on XP machines that were created from a sysprep
image and from what I remember, the problem stemmed from duplicate computer
names being created by sysprep. Could that be the case here?

Also, you can use the instructions in the following article to view deleted
objects in AD and see if the computer accounts are there (this won't help
you get them back, but will tell you if they were deleted or not):

http://support.microsoft.com/default.aspx?scid=KB;EN-US;258310

NOTE: This will only show items deleted within the last tombstone lifetime
(60 days by default).
--
Jimmy Harper [MSFT]
Directory Services
This posting is provided "AS IS" with no warranties, and confers no rights


Steve Dodson said:
Theo,

We usually see other wierdness with corrupt databases, but it could be a
possibility. Another option is that someone malicious has been removing the
accounts in AD.

To check for database problems:

315136 HOW TO: Complete a Semantic Database Analysis for the Active
Directory
http://support.microsoft.com/?id=315136

Otherwise I would look at auditing, etc.

Hope that helps!

Steve Dodson [MSFT]
Directory Services


--------------------
From: "Theo Welles" <[email protected]>
References: <[email protected]>
Click to expand...
Subject: Re: computer accounts disappear from A.D.
Date: Mon, 20 Oct 2003 17:04:43 -0500
Lines: 75
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <[email protected]>
Newsgroups: microsoft.public.win2000.active_directory
NNTP-Posting-Host: dalexch.jpi.com 206.50.227.3
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:52535
X-Tomcat-NG: microsoft.public.win2000.active_directory

Hi Steve,

thanks a lot for your answer.

I tend to exclude that some administrator deleted the entries.... I am one
of them and the other guys here say they did not.....

Is it possible that some form of A.D. database (LDAP?)
corruption/incosistency is occurring??

What tools should I use to test the integrity of my A.D.database?
NTDSUTIL??? with what sequence of commands???

Thanks again!!!!

Theo
Steve Dodson said:
Theo,

I would verify the accounts were not moved into another OU. If they are not
contained in the directory, the computers were either removed from the
domain by the users or an admin has removed the account from dsa.msc. None
of these actions happen automatically.

Steve Dodson [MSFT]
Directory Services

--------------------
From: "Theo Welles" <[email protected]>
Subject: computer accounts disappear from A.D.
Date: Mon, 20 Oct 2003 12:04:34 -0500
Lines: 11
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <[email protected]>
Newsgroups: microsoft.public.win2000.active_directory
NNTP-Posting-Host: dalexch.jpi.com 206.50.227.3
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP10.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:52486
X-Tomcat-NG: microsoft.public.win2000.active_directory

Hi all!

Some users are no longer able to logon to the domain. When I look into A.D.
Users and Computers I see that their computer account has disappeared. The
computers are Win2k professional in Win2k domain.
What causes this and how can I fix it?

Thanks!!!






--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Click to expand...
Click to expand...


--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
Click to expand...
 
Back
Top