Server 2003 Permissions Locked Out!

crystalv · 12-12-2007, 09:03 AM

Here is the story: I was working on a domain controller for a customer. Got everything set up correctly. After the weekend goes by he says he can no longer log in. I go to check things out and all of the permissions are messed up on the 2003 server. Someone actually denied administrators the ability to log into the domain, so I changed all of his users to non-admins. I would just change the permissions, but apparently admins are not able to change any permissions either. No local permissions or the group policy.

I know my way around domain controllers and such, but I am not an expert. So, is there any way for me to change/reset permissions or create a new user or something to allow me to edit the local security policy and the group policy?

Also, what do you think caused this? They did have remote desktop turned on and the login was Administrator:password. Hacker?

The system is virus free.

**XtabbedoutX** · 12-12-2007, 03:16 PM

Are you physically logging into the the server via the Administrator or using remote desktop?

crystalv · 12-12-2007, 03:44 PM

Physically logging in to the server as the Administrator. However, I can not change any of the local or group policy's!

**XtabbedoutX** · 12-12-2007, 03:51 PM

Administrator is a GOD account. If you have been "locked out" from making changes with that account, I do not believe there is a way to circumvent that.

Can you view the permissions? Is there any group or user that has full control?

Maybe someone figured out they could get in and decided to have fun at your expense.

crystalv · 12-12-2007, 03:57 PM

Yeah, that is what it looked like to me (someone got in and changed the permissions to be a pain). So the main question...is there a way to reset them or something? Maybe uninstall active directory and the DNS, etc, and reinstall it?

**XtabbedoutX** · 12-17-2007, 01:15 PM

Sorry for the slow reply.

Is this a new setup or a functioning server?

austine · 12-18-2007, 03:14 AM

i want to configure a Domain Controller, please tell me the step by step to do it, or maybe u can direct me to how i ca get a lab video on how to do that.

thanks

austine · 12-18-2007, 03:15 AM

i want to configure a Domain Controller, please tell me the step by step to do it, or maybe u can direct me to how i ca get a lab video on how to do that. my E-mail is :austineonye2002@yahoo.com

thanks

crystalv · 12-18-2007, 06:16 AM

It was a functioning server before I got to it. I added folder redirection and roaming profiles.

**XtabbedoutX** · 12-18-2007, 06:50 AM

Do you have a backup of the server before you made any changes. If so you could try to do a system state restore.

Continunity · 12-18-2007, 09:29 AM

Have you got another domain admin account on the domain?

12-12-2007, 09:03 AM	#1 (permalink)
crystalv Registered User Join Date: Apr 2007 Posts: 32 OS: XP	Server 2003 Permissions Locked Out! Here is the story: I was working on a domain controller for a customer. Got everything set up correctly. After the weekend goes by he says he can no longer log in. I go to check things out and all of the permissions are messed up on the 2003 server. Someone actually denied administrators the ability to log into the domain, so I changed all of his users to non-admins. I would just change the permissions, but apparently admins are not able to change any permissions either. No local permissions or the group policy. I know my way around domain controllers and such, but I am not an expert. So, is there any way for me to change/reset permissions or create a new user or something to allow me to edit the local security policy and the group policy? Also, what do you think caused this? They did have remote desktop turned on and the login was Administrator:password. Hacker? The system is virus free.

12-12-2007, 03:16 PM	#2 (permalink)
XtabbedoutX TSF Enthusiast Join Date: Sep 2007 Location: Oklahoma City Posts: 1,189 OS: Server 2K3 R2 SP 2, Server 2K SP4, XP PRO SP 3, Mac OS X 10.5, iPhone My System	Re: Server 2003 Permissions Locked Out! Are you physically logging into the the server via the Administrator or using remote desktop?

12-12-2007, 03:44 PM	#3 (permalink)
crystalv Registered User Join Date: Apr 2007 Posts: 32 OS: XP	Re: Server 2003 Permissions Locked Out! Physically logging in to the server as the Administrator. However, I can not change any of the local or group policy's!

12-12-2007, 03:51 PM	#4 (permalink)
XtabbedoutX TSF Enthusiast Join Date: Sep 2007 Location: Oklahoma City Posts: 1,189 OS: Server 2K3 R2 SP 2, Server 2K SP4, XP PRO SP 3, Mac OS X 10.5, iPhone My System	Re: Server 2003 Permissions Locked Out! Administrator is a GOD account. If you have been "locked out" from making changes with that account, I do not believe there is a way to circumvent that. Can you view the permissions? Is there any group or user that has full control? Maybe someone figured out they could get in and decided to have fun at your expense.

12-12-2007, 03:57 PM	#5 (permalink)
crystalv Registered User Join Date: Apr 2007 Posts: 32 OS: XP	Re: Server 2003 Permissions Locked Out! Yeah, that is what it looked like to me (someone got in and changed the permissions to be a pain). So the main question...is there a way to reset them or something? Maybe uninstall active directory and the DNS, etc, and reinstall it?

12-17-2007, 01:15 PM	#6 (permalink)
XtabbedoutX TSF Enthusiast Join Date: Sep 2007 Location: Oklahoma City Posts: 1,189 OS: Server 2K3 R2 SP 2, Server 2K SP4, XP PRO SP 3, Mac OS X 10.5, iPhone My System	Re: Server 2003 Permissions Locked Out! Sorry for the slow reply. Is this a new setup or a functioning server?

12-18-2007, 03:14 AM	#7 (permalink)
austine Registered User Join Date: Dec 2007 Posts: 2 OS: Windows XP	Re: Server 2003 Permissions Locked Out! i want to configure a Domain Controller, please tell me the step by step to do it, or maybe u can direct me to how i ca get a lab video on how to do that. thanks

12-18-2007, 03:15 AM	#8 (permalink)
austine Registered User Join Date: Dec 2007 Posts: 2 OS: Windows XP	Re: Server 2003 Permissions Locked Out! i want to configure a Domain Controller, please tell me the step by step to do it, or maybe u can direct me to how i ca get a lab video on how to do that. my E-mail is :austineonye2002@yahoo.com thanks

12-18-2007, 06:16 AM	#9 (permalink)
crystalv Registered User Join Date: Apr 2007 Posts: 32 OS: XP	Re: Server 2003 Permissions Locked Out! It was a functioning server before I got to it. I added folder redirection and roaming profiles.

12-18-2007, 06:50 AM	#10 (permalink)
XtabbedoutX TSF Enthusiast Join Date: Sep 2007 Location: Oklahoma City Posts: 1,189 OS: Server 2K3 R2 SP 2, Server 2K SP4, XP PRO SP 3, Mac OS X 10.5, iPhone My System	Re: Server 2003 Permissions Locked Out! Do you have a backup of the server before you made any changes. If so you could try to do a system state restore.

12-18-2007, 09:29 AM	#11 (permalink)
Continunity Registered User Join Date: Jun 2006 Posts: 23 OS: 00/XP/03	Re: Server 2003 Permissions Locked Out! Have you got another domain admin account on the domain? __________________ Rgds //Continunity Advice given, is followed at your own risk.