Discussion Locked

Windows 4.0 NT Server

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
MY WINDOWS NT SERVER RECENTLY CRUSHED, DUE TO A VIRUS. TRIED TO REPAIR USING AN NT CD, DIFFERENT FROM THAT I USED TO INSTALL, BUT THE SAME VERSION 4.0. IT FAILED TO RECOGNISE THE ADMINISTRATORS PASSWORD AND DOMAIN PREVIOUS USED AFTER REPAIR. WHAT CAN I DO AFTER ALL THIS MESS?

7 replies

by liteswitch

What virus did your server contract. there are some viruses out that try to change registry values within PC's. mainly IP addresses assigned and passwords for domains and accounts. do any other users have permissions to log onto the server itself,and if so, have you tried this? Try the built in Guest account that is automatically created on an NT server. if you can log on with that, then it is an issue with the administrator account itself.

to prevent this happening again, you should do a full system backup of a server daily, and do a weekly or monthly back up and keep that copy off site. or use disk imaging software. Let me know if any of the above ideas I suggested work. I'll try to help as best I can.

by curacao_dejavu

1. if you have a emergency repair disk, you can do a reinstall of the server and select repair registry. You will get the administrator password from the pc you made the erd from.
2. You can reinstall nt in a different path, So it will be a brand new installation. But depending of the function of the crashed server and if you have more servers, you can use this option (is it a pdc . bdc, member server). If there are more servers promote one of those to become the pdc and recreate this one to be a bdc. It is the pdc after reinstalling you have to let all pc become member of the new domain (even if it has the same name, the sid is different).
For the future install a antivirus on all servers , some viruses are network aware so even if in theory a server would need a antivirus if you made a mapping to that server and you contract a network virus it could contaminate the server.
One more thing; create multiple partitions and keep the OS seperate from the data ( I think there's a artickle on this on tech republic.)

If you are going to copy the datafiles to another location remember to have a antivirus running.

regards,

by bohicam1

You can do one of two things, first, start a brand new install but when it wants to place it into the c:\winnt directory, change it to c:\winnt2 This will give you a brand new install in which you can now give the admin account a new password. Chances are your SAM database is corrupt and there is no getting back into this thing any other way.
You can also remove the drive and insert it into another machine and access the contents from your server that way. If this was your PDC, make sure you promote a BDC to PDC first so that you can still keep all your user accounts intact.
Copy the data to another drive and wipe this one clean and reinstall over it. This might take a while depending on how much data is on it but I really don't know of any other way.
Good luck!

Mike

This discussion is closed to new replies.