Hello.

There's a loto f thing you can try:


I rebooted the server and hit F8. Chose recovery options then command prompt. 
It presents a single account to select Administrator. I do then enter the 
password that I think should be used..it works I get to command prompt.

>From the command prompt I run net user and it shows administrator and guest as 
>the two accounts.
>From the recovery command prompt, try: net user administrator /active:yes
Plus, check if there's any GPO deactivating local administrator account



So I'm at a bit of a loss...how can I unlock the Administrator account....I 
have a laptop I could join it to the domain...log in as domain\user and perhaps 
it would give me ad&u access? But to join it to the domain it will challenge me 
for Admin user which is the locked Administrator...??
Delegate permission to other users join computers into the domain and configure 
a GPO accordingly.



De: [email protected] [mailto:[email protected]] Em 
nome de Brown, Ken F.
Enviada em: sexta-feira, 6 de novembro de 2015 14:13
Para: [email protected]
Assunto: [adgpo] RE: W2K12 Administrator Account Locked Out

And that is why physical security of your machines (especially domain 
controllers) is so important!  For a lab, not so much...but for production, is 
crucial (and that includes "physical" access to the virtual machine also!)

Although...whole disk encryption of the machine or domain controller would not 
make that method work...at least depending up on the whole disk encryption 
method used.

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of 
[email protected]<mailto:[email protected]>
Sent: Friday, October 23, 2015 3:17 PM
To: [email protected]<mailto:[email protected]>
Subject: [adgpo] RE: W2K12 Administrator Account Locked Out

Sent by an external sender
________________________________
This email has an alternate reply address set.
________________________________

http://vthoughtsofit.blogspot.com/2013/03/reset-your-domain-administrator.html#.ViqHhOlRGM8



________________________________
From: [email protected]<mailto:[email protected]> 
[[email protected]] on behalf of John Bonner [[email protected]]
Sent: Saturday, October 17, 2015 12:19 PM
To: [email protected]<mailto:[email protected]>
Subject: [adgpo] W2K12 Administrator Account Locked Out




Hello,



I am a software developer and not a very savvy sysadmin. This group has helped 
me out in the past and I need your help again.



I have a development environment setup in my garage using vpc on server 2012.



Everything has been fine for about 6 months and I was directly logged on about 
a month ago to setup a new website.





However this morning when I try to login under the Domain\Administrator I am 
getting the message this account has been disabled.

I am assuming at some point I must have fat fingered my Administrator account 
and locked it.



I had two other accounts setup with domain privs but must not be quite right 
because when I try to logon using domain\user I get the sign in method you are 
trying to use is not allowed.



I rebooted the server and hit F8. Chose recovery options then command prompt. 
It presents a single account to select Administrator. I do then enter the 
password that I think should be used..it works I get to command prompt.

>From the command prompt I run net user and it shows administrator and guest as 
>the two accounts.





I have tried various combinations like net user Administrator /reset and it 
says it succeeds but then after reboot still that same "account disabled" 
message.





So I'm at a bit of a loss...how can I unlock the Administrator account....I 
have a laptop I could join it to the domain...log in as domain\user and perhaps 
it would give me ad&u access? But to join it to the domain it will challenge me 
for Admin user which is the locked Administrator...??



Have I shot myself in the foot and looking at a reinstall...that would be a 
major undertaking...



TIA

JB



Reply via email to