Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computer Certification > MCSE > Server issues

Reply
Thread Tools

Server issues

 
 
Michael D. Alligood [CertGuard, Inc.]
Guest
Posts: n/a
 
      11-05-2007
Today, my client's Windows 2000 Server freaked out. 3 weeks ago, I added
4 new user accounts with roaming profiles and mapped drives to user
folders on the server. All user data (My Documents) was stored on the
server in there user folders. Today, those 4 accounts and their
respected folders disappeared from the server. No trace of evidence was
in the Event Viewer. Nothing.

On top of that, I could not log on to any domain account from any of the
computers. The error message stated that the computer account for this
primary domain was missing. So I logged in locally and rejoined the
computers to the domain.

Any idea what in the world happened -- especially to the 4 new accounts,
their profiles and folders?

--
Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
The I.T. Classroom - http://www.theitclassroom.com/
CertGuard, Inc. - http://www.certguard.com/
Microsoft Exam Security Newsgroup -
microsoft.public.certification.exam.security


 
Reply With Quote
 
 
 
 
The Rev [MCT]
Guest
Posts: n/a
 
      11-05-2007
Did someone delete the container the accounts were in on another DC before
replication occured?

--
..rev

"It is the mark of an educated man to be able to entertain a thought without
accepting it"
~Aristotle
..
"Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote in
message news:%23XbGF$$(E-Mail Removed)...
> Today, my client's Windows 2000 Server freaked out. 3 weeks ago, I added 4
> new user accounts with roaming profiles and mapped drives to user folders
> on the server. All user data (My Documents) was stored on the server in
> there user folders. Today, those 4 accounts and their respected folders
> disappeared from the server. No trace of evidence was in the Event Viewer.
> Nothing.
>
> On top of that, I could not log on to any domain account from any of the
> computers. The error message stated that the computer account for this
> primary domain was missing. So I logged in locally and rejoined the
> computers to the domain.
>
> Any idea what in the world happened -- especially to the 4 new accounts,
> their profiles and folders?
>
> --
> Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
> The I.T. Classroom - http://www.theitclassroom.com/
> CertGuard, Inc. - http://www.certguard.com/
> Microsoft Exam Security Newsgroup -
> microsoft.public.certification.exam.security
>
>


 
Reply With Quote
 
 
 
 
Michael D. Alligood [CertGuard, Inc.]
Guest
Posts: n/a
 
      11-06-2007
"The Rev [MCT]" <(E-Mail Removed)> wrote in message
news:#J#(E-Mail Removed):

> Did someone delete the container the accounts were in on another DC before
> replication occured?
>
> --
> .rev
>
> "It is the mark of an educated man to be able to entertain a thought without
> accepting it"
> ~Aristotle
> .
> "Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote in
> message news:%23XbGF$$(E-Mail Removed)...
> > Today, my client's Windows 2000 Server freaked out. 3 weeks ago, I added 4
> > new user accounts with roaming profiles and mapped drives to user folders
> > on the server. All user data (My Documents) was stored on the server in
> > there user folders. Today, those 4 accounts and their respected folders
> > disappeared from the server. No trace of evidence was in the Event Viewer.
> > Nothing.
> >
> > On top of that, I could not log on to any domain account from any of the
> > computers. The error message stated that the computer account for this
> > primary domain was missing. So I logged in locally and rejoined the
> > computers to the domain.
> >
> > Any idea what in the world happened -- especially to the 4 new accounts,
> > their profiles and folders?
> >
> > --
> > Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
> > The I.T. Classroom - http://www.theitclassroom.com/
> > CertGuard, Inc. - http://www.certguard.com/
> > Microsoft Exam Security Newsgroup -
> > microsoft.public.certification.exam.security
> >
> >


Nope. This is a single server environment.

--
Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
The I.T. Classroom - http://www.theitclassroom.com/
CertGuard, Inc. - http://www.certguard.com/
Microsoft Exam Security Newsgroup -
microsoft.public.certification.exam.security


 
Reply With Quote
 
The Rev [MCT]
Guest
Posts: n/a
 
      11-06-2007
Well if there are no Audit logs, no accounts and no user data maybe you only
thought you did it. Mayhbe it was a dream and then you woke up.

--
..rev

"It is the mark of an educated man to be able to entertain a thought without
accepting it"
~Aristotle
..
"Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote in
message news:%(E-Mail Removed)...
> "The Rev [MCT]" <(E-Mail Removed)> wrote in message
> news:#J#(E-Mail Removed):
>
>> Did someone delete the container the accounts were in on another DC
>> before
>> replication occured?
>>
>> --
>> .rev
>>
>> "It is the mark of an educated man to be able to entertain a thought
>> without
>> accepting it"
>> ~Aristotle
>> .
>> "Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote
>> in
>> message news:%23XbGF$$(E-Mail Removed)...
>> > Today, my client's Windows 2000 Server freaked out. 3 weeks ago, I
>> > added 4
>> > new user accounts with roaming profiles and mapped drives to user
>> > folders
>> > on the server. All user data (My Documents) was stored on the server in
>> > there user folders. Today, those 4 accounts and their respected folders
>> > disappeared from the server. No trace of evidence was in the Event
>> > Viewer.
>> > Nothing.
>> >
>> > On top of that, I could not log on to any domain account from any of
>> > the
>> > computers. The error message stated that the computer account for this
>> > primary domain was missing. So I logged in locally and rejoined the
>> > computers to the domain.
>> >
>> > Any idea what in the world happened -- especially to the 4 new
>> > accounts,
>> > their profiles and folders?
>> >
>> > --
>> > Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
>> > The I.T. Classroom - http://www.theitclassroom.com/
>> > CertGuard, Inc. - http://www.certguard.com/
>> > Microsoft Exam Security Newsgroup -
>> > microsoft.public.certification.exam.security
>> >
>> >

>
> Nope. This is a single server environment.
>
> --
> Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
> The I.T. Classroom - http://www.theitclassroom.com/
> CertGuard, Inc. - http://www.certguard.com/
> Microsoft Exam Security Newsgroup -
> microsoft.public.certification.exam.security
>
>


 
Reply With Quote
 
Michael D. Alligood [CertGuard, Inc.]
Guest
Posts: n/a
 
      11-06-2007
"The Rev [MCT]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed):

> Well if there are no Audit logs, no accounts and no user data maybe you only
> thought you did it. Mayhbe it was a dream and then you woke up.
>
> --
> .rev
>
> "It is the mark of an educated man to be able to entertain a thought without
> accepting it"
> ~Aristotle
> .
> "Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote in
> message news:%(E-Mail Removed)...
> > "The Rev [MCT]" <(E-Mail Removed)> wrote in message
> > news:#J#(E-Mail Removed):
> >
> >> Did someone delete the container the accounts were in on another DC
> >> before
> >> replication occured?
> >>
> >> --
> >> .rev
> >>
> >> "It is the mark of an educated man to be able to entertain a thought
> >> without
> >> accepting it"
> >> ~Aristotle
> >> .
> >> "Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote
> >> in
> >> message news:%23XbGF$$(E-Mail Removed)...
> >> > Today, my client's Windows 2000 Server freaked out. 3 weeks ago, I
> >> > added 4
> >> > new user accounts with roaming profiles and mapped drives to user
> >> > folders
> >> > on the server. All user data (My Documents) was stored on the server in
> >> > there user folders. Today, those 4 accounts and their respected folders
> >> > disappeared from the server. No trace of evidence was in the Event
> >> > Viewer.
> >> > Nothing.
> >> >
> >> > On top of that, I could not log on to any domain account from any of
> >> > the
> >> > computers. The error message stated that the computer account for this
> >> > primary domain was missing. So I logged in locally and rejoined the
> >> > computers to the domain.
> >> >
> >> > Any idea what in the world happened -- especially to the 4 new
> >> > accounts,
> >> > their profiles and folders?
> >> >
> >> > --
> >> > Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
> >> > The I.T. Classroom - http://www.theitclassroom.com/
> >> > CertGuard, Inc. - http://www.certguard.com/
> >> > Microsoft Exam Security Newsgroup -
> >> > microsoft.public.certification.exam.security
> >> >
> >> >

> >
> > Nope. This is a single server environment.
> >
> > --
> > Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
> > The I.T. Classroom - http://www.theitclassroom.com/
> > CertGuard, Inc. - http://www.certguard.com/
> > Microsoft Exam Security Newsgroup -
> > microsoft.public.certification.exam.security
> >
> >


That was the first thing I said! However the 4 new users had been
operating for 3 weeks, then poof. Gone right along with their home
folders, profiles and data.

--
Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
The I.T. Classroom - http://www.theitclassroom.com/
CertGuard, Inc. - http://www.certguard.com/
Microsoft Exam Security Newsgroup -
microsoft.public.certification.exam.security


 
Reply With Quote
 
Vaughan Butler
Guest
Posts: n/a
 
      11-06-2007
"Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote in
message news:%23XbGF$$(E-Mail Removed)...
> Today, my client's Windows 2000 Server freaked out. 3 weeks ago, I added 4
> new user accounts with roaming profiles and mapped drives to user folders
> on the server. All user data (My Documents) was stored on the server in
> there user folders. Today, those 4 accounts and their respected folders
> disappeared from the server. No trace of evidence was in the Event Viewer.
> Nothing.
>
> On top of that, I could not log on to any domain account from any of the
> computers. The error message stated that the computer account for this
> primary domain was missing. So I logged in locally and rejoined the
> computers to the domain.
>
> Any idea what in the world happened -- especially to the 4 new accounts,
> their profiles and folders?
>
> --
> Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
> The I.T. Classroom - http://www.theitclassroom.com/
> CertGuard, Inc. - http://www.certguard.com/
> Microsoft Exam Security Newsgroup -
> microsoft.public.certification.exam.security
>
>


No mention of whether you back up data or the AD...


 
Reply With Quote
 
CBIC
Guest
Posts: n/a
 
      11-06-2007

"The Rev [MCT]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Well if there are no Audit logs, no accounts and no user data maybe you
> only thought you did it. Mayhbe it was a dream and then you woke up.
>


I blame the Rev's bonus.


 
Reply With Quote
 
JaR
Guest
Posts: n/a
 
      11-06-2007
CBIC wrote:

>
> "The Rev [MCT]" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Well if there are no Audit logs, no accounts and no user data maybe
> > you only thought you did it. Mayhbe it was a dream and then you
> > woke up.
> >

>
> I blame the Rev's bonus.


And Neil, of course.

--
JaR
But mostly the bonus
Remove hat to reply
 
Reply With Quote
 
Consultant
Guest
Posts: n/a
 
      11-06-2007
who else has admin permissions to your server? are there any new admin
accounts on it?

"Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote in
message news:%23XbGF$$(E-Mail Removed)...
> Today, my client's Windows 2000 Server freaked out. 3 weeks ago, I added 4
> new user accounts with roaming profiles and mapped drives to user folders
> on the server. All user data (My Documents) was stored on the server in
> there user folders. Today, those 4 accounts and their respected folders
> disappeared from the server. No trace of evidence was in the Event Viewer.
> Nothing.
>
> On top of that, I could not log on to any domain account from any of the
> computers. The error message stated that the computer account for this
> primary domain was missing. So I logged in locally and rejoined the
> computers to the domain.
>
> Any idea what in the world happened -- especially to the 4 new accounts,
> their profiles and folders?
>
> --
> Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
> The I.T. Classroom - http://www.theitclassroom.com/
> CertGuard, Inc. - http://www.certguard.com/
> Microsoft Exam Security Newsgroup -
> microsoft.public.certification.exam.security
>
>



 
Reply With Quote
 
Michael D. Alligood [CertGuard, Inc.]
Guest
Posts: n/a
 
      11-06-2007
"Consultant" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed):

> who else has admin permissions to your server? are there any new admin
> accounts on it?
>
> "Michael D. Alligood [CertGuard, Inc.]" <(E-Mail Removed)> wrote in
> message news:%23XbGF$$(E-Mail Removed)...
> > Today, my client's Windows 2000 Server freaked out. 3 weeks ago, I added 4
> > new user accounts with roaming profiles and mapped drives to user folders
> > on the server. All user data (My Documents) was stored on the server in
> > there user folders. Today, those 4 accounts and their respected folders
> > disappeared from the server. No trace of evidence was in the Event Viewer.
> > Nothing.
> >
> > On top of that, I could not log on to any domain account from any of the
> > computers. The error message stated that the computer account for this
> > primary domain was missing. So I logged in locally and rejoined the
> > computers to the domain.
> >
> > Any idea what in the world happened -- especially to the 4 new accounts,
> > their profiles and folders?
> >
> > --
> > Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
> > The I.T. Classroom - http://www.theitclassroom.com/
> > CertGuard, Inc. - http://www.certguard.com/
> > Microsoft Exam Security Newsgroup -
> > microsoft.public.certification.exam.security
> >
> >


One admin account. 2 people know it (including myself). No new admin
accounts. To be honest, and if it were possible, it looks like someone
did a Windows XP System Restore to an earlier date! It started Saturday
around 3pm. Noticeable on Monday when everyone tried to log in. When I
got that fixed by rejoining all the computer back to the domain, I
noticed the 4 newest account (about 3 weeks old) were completely gone --
along with their profiles. Today I noticed the mirror failed. So I
imported the "foreign disk" and reactivated the mirror. I really think
it is time for another server, but just want to understand what exactly
happened.

--
Michael D. Alligood, MCITP, MCTS, MCSA, MCDST
The I.T. Classroom - http://www.theitclassroom.com/
CertGuard, Inc. - http://www.certguard.com/
Microsoft Exam Security Newsgroup -
microsoft.public.certification.exam.security


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Windows XP Pro clean install issues, SP2 issues too... Howie Computer Support 9 07-12-2005 04:47 PM
Windows XP Pro clean install issues, SP2 issues too... Howie Computer Support 0 07-06-2005 07:12 PM
Re: Windows XP Pro clean install issues, SP2 issues too... pcbutts1 Computer Support 0 07-06-2005 04:58 PM
Re: Windows XP Pro clean install issues, SP2 issues too... pcbutts1 Computer Support 0 07-06-2005 04:52 PM
SNMP Issues in Cisco Routers; Vulnerability Issues in TCP =?iso-8859-1?Q?Frisbee=AE?= MCSE 0 04-21-2004 03:00 PM



Advertisments