Guys, This is the document in question, sorry for non specifics before but the web was not to hand (I used my blackberry)
I thought today, I would start again: so I took a clean backup and restored my forest root. After restoration I rebooted and could logon with no issue as a user. I then followed the steps in the wp and reset the trusts; DC accounts etc.... I rebooted again and immediately afterwards, I could then logon only as an administrator. I have and had not restored anything else at this stage. I have never experienced anything like this before and I am at a potential loss. Am I doing something wrong, is this normal behaviour, is a dependancy missing that I am not aware of? Anything constructive comment would now help as I am begining to go mad. I have been using native backup tools to complete the task. Regards Mark -----Original Message----- From: Jorge de Almeida Pinto <[EMAIL PROTECTED]> Date: Fri, 20 May 2005 23:04:43 To:"'Rick Kingslan '" <[EMAIL PROTECTED]>, "'[EMAIL PROTECTED] '" <[EMAIL PROTECTED]>, "'ActiveDir@mail.activedir.org '" <ActiveDir@mail.activedir.org> Subject: RE: [ActiveDir] Unable to log you on because if an account restri ction Hi Rick, I think he means "Best Practices: Active Directory Forest Recovery" (http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3ED A5A79-C99B-4DF9-823C-933FEBA08CFE) I have used this white paper as basics to create a DR recovery plan for a customer of mine and it works like a charm! I'm not familiar with the issue he is experiencing after DR #JORGE# -----Original Message----- From: [EMAIL PROTECTED] To: ActiveDir@mail.activedir.org Sent: 5/20/2005 10:30 PM Subject: RE: [ActiveDir] Unable to log you on because if an account restriction Mark, Please post the link to the white paper, if you would. I'm sure that you can imagine that there are more than a few white papers that we all know about.... Rick Kingslan MCSE, MCSA, MCT, CISSP Microsoft MVP: Windows Server / Directory Services Windows Server / Rights Management Windows Security (Affiliate) Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone WebLog - www.msmvps.com/willhack4food -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Friday, May 20, 2005 8:07 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Unable to log you on because if an account restriction I followed the Microsoft whitepaper with the typo's corrected. Mark -----Original Message----- From: Jorge de Almeida Pinto <[EMAIL PROTECTED]> Date: Fri, 20 May 2005 14:42:39 To:ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Unable to log you on because if an account restri ction Do you have the possibility to post the DR steps you performed? If yes, please post them so we can take a look at it Cheers #JORGE# -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Parris Sent: Wednesday, May 18, 2005 13:15 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Unable to log you on because if an account restriction Dear all, I have just performed a disaster recovery of our Windows Server 2003 forest and I am now receiving the message "Unable to log you on because if an account restriction" when I try to logon with any account apart from the administrator account. I have a two domain forest X.com and child.x.com When the DC's were first restored and were not communicating with Each other I could logon using any account, now that the DC's are talking and replicating I cannot, now only the administrator account works. I have ensured the GPO's are set correctly, I can see nothing obvious in the event logs so now it's time to ask my peers if they have experienced any such issues. I have restored many forests in DR situations and never experienced this issue beforer. Thanks in advance. Mark List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
