How to Reset Local Administrator Password on Server

[shybrsky]

@Dashrender said:

@brianlittlejohn said:

Also came across this... cant vouch if it works or not...

http://www.bursky.net/index.php/2012/04/reset-domain-administrator-password-windows-server-2008/

I have used this method in the past - it does work, or at least did for me on 2008 (R2)

ill try tomorrow...

[shybrsky]

@LAH3385 said:

@brianlittlejohn
I have done this on workstation multiple time and yes it works.
I cannot say the same thing for DC as I have not try it yet.

noted, ill try soon

[LAH3385]

@shybrsky
can you paste some screenshots of the error or steps you taken when you try to remote in? The more the better. (please don't post anything security sensitive opened in the background).

[wrx7m]

Are you sure your profile for the domain admin user is just not corrupted?
Is this the only DC for this domain?
If so, this is a prime example of why you need more than 1.
If not, does this occur on other servers/systems when trying to login with the same account?

[shybrsky]

@LAH3385 said:

@shybrsky
can you paste some screenshots of the error or steps you taken when you try to remote in? The more the better. (please don't post anything security sensitive opened in the background).

#(please don't post anything security sensitive opened in the background). what do u mean ??

[shybrsky]

@wrx7m said:

Are you sure your profile for the domain admin user is just not corrupted?
Is this the only DC for this domain?
If so, this is a prime example of why you need more than 1.
If not, does this occur on other servers/systems when trying to login with the same account?

#how to check it user corrupted ??
#i think DC are seem bit strange ... administrator domain user mean nothing on client PC or other servers. force me to set on user account to assign administrator domain get local authority on each server

[wrx7m]

@shybrsky Looks like it is domain-wide (not just that server). Have you tried logging in directly (in front of the server) or with iDRAC/iLO?

[shybrsky]

@wrx7m said:

@shybrsky Looks like it is domain-wide (not just that server). Have you tried logging in directly (in front of the server) or with iDRAC/iLO?

yep i did .. with another user local or another domain user ( RDC group), but has no authority to access some setting

not yet with ILO

[LAH3385]

@shybrsky said:

@LAH3385 said:

@shybrsky
can you paste some screenshots of the error or steps you taken when you try to remote in? The more the better. (please don't post anything security sensitive opened in the background).

#(please don't post anything security sensitive opened in the background). what do u mean ??

This is what I replicated. Are you sure that your user is allowed to be remote in on the machine?
You mentioned that something happened is it possible that whatever happens knock the user rights out.

Can you post (if possible) the remote user rights?

[shybrsky]

@LAH3385 said:

@shybrsky said:

@LAH3385 said:

@shybrsky
can you paste some screenshots of the error or steps you taken when you try to remote in? The more the better. (please don't post anything security sensitive opened in the background).

#(please don't post anything security sensitive opened in the background). what do u mean ??

This is what I replicated. Are you sure that your user is allowed to be remote in on the machine?
You mentioned that something happened is it possible that whatever happens knock the user rights out.

Can you post (if possible) the remote user rights?

sorry for late respond,,,
just added some user to gain access to remote desktop ..

before i add, there only administrator local
maybe ,that the problem

i dont figured out yet, how administrator domain knocked out

[LAH3385]

@shybrsky
I would start with going through all the security groups member/member of. We ran into similar problem before where certain admins lose their administrator rights. Turn out they didn't have the rights from the beginning as the member they were given, named admin, does not contain administrators group. They got their administrator rights through another group, named audit, which was removed for reasons. It was a mess for a day.

To prevent this incident from happening again I would use GPO to give every machine within AD the rights for administrators group to gain remote access. In my environment we create a security group named remoteaccess for RDP
http://social.technet.microsoft.com/wiki/contents/articles/4980.how-to-enable-or-disable-remote-desktop-via-group-policy-windows-2008.aspx

[shybrsky]

@LAH3385 said:

@shybrsky
I would start with going through all the security groups member/member of. We ran into similar problem before where certain admins lose their administrator rights. Turn out they didn't have the rights from the beginning as the member they were given, named admin, does not contain administrators group. They got their administrator rights through another group, named audit, which was removed for reasons. It was a mess for a day.

To prevent this incident from happening again I would use GPO to give every machine within AD the rights for administrators group to gain remote access. In my environment we create a security group named remoteaccess for RDP
http://social.technet.microsoft.com/wiki/contents/articles/4980.how-to-enable-or-disable-remote-desktop-via-group-policy-windows-2008.aspx

mmm... thanks bud, will check on monday.. really appreciate it