Windows Forum

Ask something
Discussion Locked

Server Can't log in to the domain

0 helpful
5 replies

by tim marshall - houston 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have an NT4sp4 server that can't log in to a Windows2000 domain. The error pertains to the account name is missing. I have removed the account name from AD and recreated it, but the machine still can't log on to the network. I have synchronized the domain so the changes are reflected on the other DC. When I look at Server Manager on the other NT 4 machines in the domain, the account still shows up there, it won't disappear from the list. Any ideas. I can't log in locally because I don't know what the local admin password is.

5 replies

by timwalsh

When you deleted the computer account form AD , you effectively removed the server from the domain. Although you created another account with the same computer name, it isn't the same account. The new account has a different Security Identifier (SID) than the original account and the NT4 server isn't aware of that new SID. Therefore, it can't establish a connection with the DC.

Even though you created a new computer account you still must rejoin the server to the domain. Unfortunately, you will need to do this from the context of the local computer (must be logged on as the local admin). You may need to invest in some third-party tools (such as those from Winternals - www.winternals.com) to recover the admin password. Your only other choice would be to reload the OS (probably not your preferred choice).

Hope this helps.

by joseph moore

Sounds like you have a few problems here.

First, to break into the NT box and change the local Administrator password to whatever you would like to be (so you can then log in as the local Admin) go here:
http://home.eunet.no/~pnordahl/ntpasswd/index.html

This link is for a Linux boot floppy with its own password cracker. An essential tool.

So, use the Linux floppy and change the local Admin password on the NT box.

Then log into the NT box as the local Admin, and change it from Domain to Workgroup.
Reboot.
Next, go to your Win2K Domain Controller, and REMOVE the NT box as being a domain member.
(BTW, the NT box is NOT a PDC or BDC is it? Hope not!!)
Ok. At this point, log into the NT box as the local Admin again, and Join the Domain again.
Reboot.

Hopefully, that will do it.

hope this helps

by tim marshall - houston

You are the freaking man. Excellent advice, it took a little bit of work to actually make it work and it's not the most intuitive program around but it worked. We are back up nad running. Thanx a bunch.

This discussion is closed to new replies.