Re: FN-FORUM: one for the server experts

date posted 19th July 2005 13:07

Just join the server to a workgroup. Remove computer account from AD. Now it
is a standalone machine just like a PC. Log on and check TCP/IP settings.
Wait a bit, long time if the RID master and IM are a long way away, short if
they are on same subnet. Then rejoin domain. Also make sure time service is
synchronized. DNS problems MUST be fixed or there will be more and more
errors. All machines *must* point to INTERNAL DNS server, not the ISP.

Removing computer account from domain wouldn't affect local admin account or
ability to log on locally.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Kathy
http://www.vendetta.co.uk
+44(0)7005 982 261
DNRC Minister for Useful but Irritating Information and Trivia
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

----- Original Message -----
From: "Craig Tinson" [EMAIL REMOVED]
To: [EMAIL REMOVED]
Sent: Tuesday, July 19, 2005 11:56 AM
Subject: Re: FN-FORUM: one for the server experts


>
> Lists wrote:
>
> >Someone denied the administrators group the log on locally right (or
added
> >them to the remote access/mobile/whatever it is called group which has
the
> >same effect)?
> >
> >Should be able to manage server remotely and reset user rights from a
> >workstation.
> >
> >Is it a DC or just a member server? I'm assuming it's a member server as
DCs
> >don't have local passwords - may have to fix computer account with netdom
> >(from reskit or support tools on CD) or even leave and rejoin domain.
> >
> >If it is a member server and it can't see the DC because of DNS problems,
> >you won't log on. Get the consultant back, ask him what he did, and
threaten
> >legal action if he doesn't fix what he broke FAST.
> >
> >+++++++++++
> >
>
> Hi Kathy
>
> It's a member server.. but I've just spoken to him and found out that in
> an attempt to fix the problem they removed the Computer Account from AD
> and re-created it.. *now* he realises how really bad an idea that was.
>
> He's also said that this is unlikely to be TrackIT related - the guy
> just happened to be there while it broke (and contributed to the idea
> about removing the computer account)
>
> He's also said that somehow the computer account had become disabled in
> AD so they re-enabled it but that didn't work (probably happened while
> fixing the dns problem)
>
> I think he's stuffed
>
> Thanks for the suggestions
>
> Craig
>
>
>
> --
> Freelancers, contractors earn more with Prosperity4
> Call 0870 870 4414 or visit www.prosperity4.com
> and benefit from Inland Revenue approved expenses today.
>
> To advertise here: http://www.freelancers.net/advertising.html
>
>