How to unlock user account in Windows Server 2003

Hi,
I want to unlock a user account in Windows Server 2003.
I have read a great post at http://forums.sun.com/thread.jspa?threadID=716240&start=0&tstart=0
But I can not get it to work. According to the post the only thing you need to do is:
"+to unlock an account, just set the value of the attribute lockoutTime to zero+".
When I set lockoutTime to zero nothing happens. The user can still not logon.
When I read the lockoutTime attribute for an account that is locked it is empty or zero if I have tried to unlock it earlier.
So it doesn´t seem to change when the account is locked.
Thanks!

Hi,
Windows Server 2012 has come with the concept of Group Managed Service Account (gMSA).  
Following are the benefits of gMSA,
- A single gMSA can be used on multiple hosts.
- A gMSA can be used for scheduled tasks.
- A gMSA can be used for IIS Application Pools, SQL 2012 etc.
Checkout the below link regarding complete information on gMSA (creation and usage),
http://blogs.technet.com/b/askpfeplat/archive/2012/12/17/windows-server-2012-group-managed-service-accounts.aspx
Checkout the below thread on similar discussion,
http://social.technet.microsoft.com/Forums/en-US/5bc96d1b-0cec-4d0c-a99d-7f34509c0714/how-to-use-correctly-managed-service-account-in-windows-server-2012-?forum=winserverDS
Regards
Gopi
JiJi Technologies

Similar Messages

  • How to Expand the Screen of Windows Server 2003 on VMware Server 2 ?

    Folks,
    Hello. Because Windows 7 is not compatible to be installed PeopleSoft PIA, I have to install VMware Server 2 and then install Windows Server 2003, that is compatible with PIA, on the virtual machine.
    But when I open Windows Server 2003 on the virtual machine, the screen of Win2K3 is very small, and its size is about 1/4 of the screen of my computer screen. This is not comfortable to work for a long time.
    Does any folks know how to expand the screen of Windows Server 2003 on VMware Server 2 virtual machine so that its size covers the entire screen of my computer ?
    Thanks in advance !
    Lucy

    Did you already installed the VMWare tools onto your VMWare guest OS ? Generally, it helps a lot to be able to redefine a larger screen definition.
    Nicolas.

  • Transferring network user files from Windows Server 2003 to Mac OSX 10.5.8

    I'm wondering if any network admins out there have a suggested method of transferring network user files from a Windows Server 2003 to an XServe running 10.5.8?
    When we did the file transfer, clicking and dragging, there were a myriad permissions issues that subsequently arose. Surely there is a way to strip permissions off files PRIOR to the transfer?? Maybe not, but I'm wondering how you folks have done it.
    We have had nothing but persistent permissions issues since the transfer (i.e. folks who should have access to files, being denied access, including the local server admin!!). This also translates to synch errors for network mobile accounts.
    Thanks,
    John Orban
    System Administrator
    The Country School

    http://www.laurentnomine.com/2009/09/invalid-file-handle-when-copying-files-from -os-x-leopard-10-5-to-vista7/

  • Running 10G as a non local system account on Windows Server 2003

    Hi,
    I have an Oracle 10G database running on Windows Server 2003, SP2. I have created the database and it all works fine while the service is running as the default local system account. However, when I change the user that the service runs as to a different account the database starts and opens, and I can log on as SYS using a bequeath connection but I am unable to log on as any other user going through the listener. The listener responds to TNSpings, and all seems to be OK. When I switch it back to the local system user again it all works fine.
    Can anyone offer any advice or help?
    Thanks,
    Rob

    That's probably because the listener is still running as the local system account. Have you tried to change the listener service to run as the same account as the Oracle service?

  • How to install rootsupd.exe on windows server 2003?

    hello
    i need to update the root certificates. but i can't use "rootsupd.exe", it's only for windows xp...
    there doesn't seems to be a similar update for windows server 2003, correct?
    how can i solve my problem, do i need to install the certificates manually? if yes, how does this work?
    thank you very much!
    best regards, jan
    regards, jan

    "when ich click on "rootsupd.exe" in my windows server 2003 web edition virtual machine (virtualbox), nothing happens - i can't see any actions after clicking that file... and i don't think that behavior is usual...?"
    same behavior on windows 7 (x64) workstation - nothing happens after clicking.
    maybe i need to extract it, and install the files manually?:
    - authroots.sst
    - delroots.sst
    - roots.sst
    - updroots.sst
    regards, jan

  • HT203175 How do I install iTunes on Windows Server 2003?!? I get an error every time!!

    I am having trouble installing any version of ITunes 10.5 or later
    on my Windows 2003 Server PC. I receive the following error
    every time I try to install it...
    "Apple Mobile Device Support requires that your computer is running Windows XP SP2 or newer"
    I anyone has had this same problem I would appreciate any help!!!
    Thank you!!!

    I've googled my problem with many hits stating Itunes can indeed be installed
    by making changes to the msi packages and I believe a few
    registry hacks. It sounds like it can be done, but before experimenting with
    those suggestions I thought looking to the Apple community on the official site
    might glean a better remedy.
    I'm just surprised Apple doesn't support any Windows Server applications
    even though Windows Server 2003 came out after Windows XP,
    (Server 2003 - 2003____XP - 2001)

  • Restore deleted AD User Account in Windows Server 2012

    Good day.
    I know Windows Server 2012 has an Active Directory Recycle Bin feature, however upon enabling the feature it doesn't display the deleted user account I have deleted prior to enabling the feature. Is this normal? Does the feature only displays deleted AD
    objects after you have enabled it? Is there other way to display those objects? Thanks in advance.

    Hi James,
    Yes, You should have a valid system state back to perform an authoritative restore.
     In case you don’t have any system state backup, you can use ADRestore to restore tombstoned objects. When an object is deleted from Active Directory, it isn't actually removed but is instead marked as deleted by an internal marker called
    a tombstone. 
    Note: ADRestore cannot restore the group membership for a user. Meanwhile, not all attribute data can be restored.
    http://blogs.technet.com/b/asiasupp/archive/2006/12/14/using-adrestore-tool-to-restore-deleted-objects.aspx
    Regards,
    Rafic
    If you found this post helpful, please give it a "Helpful" vote.
    If it answered your question, remember to mark it as an "Answer".
    This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!
    No he can _not_, as there is no tombstones when the recycle-bin is enabled, recycled objects can not be restored/reanimated.
    Enfo Zipper
    Christoffer Andersson – Principal Advisor
    http://blogs.chrisse.se - Directory Services Blog

  • Some normal users profile on Windows Server 2003 ???

    Hello, I manage a Windows 2003 Server in a school board of 30 000+ students. Each of these students have their home folder located on a share on one of our file servers (eg :
    \\server\schoolID$\user) which is on the E:\ drive of the server)
    For some reason, while browsing in C:\Documents and Settings on that server, we noticed that 40 of these users had an incomplete profile only containing these 2 folders and 2 files...
    We have reviewed the security groups on the server and we are 100% sure that they don't have access in any way to that server (besides their home folder...). We also tried to connect using mstsc and they can't even log in remotely. We are wondering what
    can cause the creation of some of these users profiles for these specific users? (Since 2011, there were only 40 profiles created out of 30 000+ students so it is not something that started recently or that is growing or touching all of our users...)
    Any idea of what could be the cause of these mysterious incomplete student profiles on that server ?
    Thanks for the help!

    OK...we've been able to reproduce the problem... A normal user simply has to encrypt a folder on his home folder located on a share on one of our file servers (eg :
    \\server\schoolID$\user) and it will create the incomplete profile (see screenshot below - Right click on a folder - Properties - General tab - Advanced and select the last option) :
    Can't explain why it behaves like this but at least, we know why this happens...

  • We're running Windows server 2003 32bit and want to migrate to Windows server 2012R2 64bit, can someone provide a step by step procedure on how to migrate instances on ADAM to AD LDS?

    I have no experience in dealing with servers, but my senior has asked me to investigate on how to migrate instances on ADAM (windows server 2003 32bit) to AD LDS (Windows server 2012R2 64 bit) as in place upgrade is not an option as we're running a 32bit
    Server and want to migrate to a 64bit Server. can someone please give me a Walkthrough on how to do this.
    Thanks in advance.

    Hi,
    it'd be of great help if you could give me a step by step process of replication.
    There is no step-by-step article/guide of replication process, replication between AD LDS instances of the same configuration set is an automatic process.
    All we need to make sure is to create a replica of the existing instance, and there is no network/security obstacle preventing the replication.
    Please note that we need to install AD LDS from Server manager on Windows Server 2012 and 2012 R2.
    More information for you:
    Understanding AD LDS Replication and Configuration Sets
    http://technet.microsoft.com/en-us/library/cc770465.aspx
    Best Regards,
    Amy

  • Crystal 8 Web Component Server ond Windows Server 2003 and IIS 6

    I am trying to get Crystal 8 Web Component and Page Server to run on Windows 2003 Server with IIS 6. I have done the following:
    Added the .cri and .rpt ISAPI extension mappings
    Have Cache ISAPI extentions selected
    Deselected "verify that file exists"
    Aded the .cri and .rpt MIME types
    Added wcsinsapi.dll as a IIS 6.0 extension
    The above resolved all HTTP 40x.x errors but when trying to access a report from IE I receive the following error:
    Error: Could not connect to the Web Component Server.
    The page server and web component server services are running and I do see the listen ports (6401, 6403) active.
    I know this is old software but it works quite well under a Windows 2000 Server and other web postings indicate that it is possible to run Crystal 8 under WS2003 and IIS 6.
    Does any one know of a white paper/support document that details how to run Crystal 8 under Windows Server 2003 and IIS 6?
    Has any one done this successfully?
    Any tips as to cause of the "Could Not Connect" problem would be greatly appreciated.

    Well as it turns out it looks like it was just this server.
    We tried everything, and I added those user accounts to full
    permission for the Coldfusion folders and we just could not get it
    to work. We tried it on another couple servers running 2003, and it
    installed perfectly right out of the box with no other permissions
    needed. And those servers were all running default configs with no
    other permissions done.
    We still have no idea what was the problem, but at least for
    now it seems to be this server. But I will tell you what, that II6
    stuff seems to be a bit of a pain, we had major problems installing
    new version of PHP with it too. Oh well, good luck to you
    too!

  • Upgrading windows server 2003 domain controller to windows server 2008

    Hello friedns :
    We have a company with about 2000 users , and two windows server 2003 domain controllers , one of them acts as a primary domain controller , and the other acts as secondary domain controller , all the FSMO s are on the primary DC ,we have decided to upgrade all of our servers from windows server 2003 to windows server 2008 , the first step is to upgrade the domain controllers to windows server 2008 , our domain controllers are so sensitive and has to be active 24 hours a day , i have stress upgrading it to windows server 2008 , what is the best solution to upgrade it with no risk ?
    ( i have an opinion but i am not sure and i dont have any guide about it , i want to install a windows server 2008 and promote it as an additional domain controller to the windows server 2003 DC and the transfer all the FSMOs to it , and then promote the first domain controller !!! is that possible ? if yes , is there any guide about it? )
    If there is a guide available for it please let me know . (Specially if there is a tip & trick)
    thank you guys.
    Network is my LOVE

    Hi,
    This TechNet online article might be helpful for you.
    How to Upgrade Domain Controllers to Windows Server 2008 or Windows Server 2008 R2
    http://technet.microsoft.com/en-us/library/ee522994(WS.10).aspx
    For your convenience, I have list some general steps for your reference.
    Since the following operation have potential damage to Active Directory database, it is highly suggested that you'd better perform a full backup of Active Directory (System State) firstly. Also it is better to test the following procedure in a similar lab environment first.
    General Steps:
    =============
    1. Verify the new server's TCP/IP configuration has been pointed to the current DNS server.
    2. Make the new server become a member server of the current Windows Server 2003 domain first.
    3. Upgrade the Windows Server 2003 forest schema to Windows Server 2008 schema with the "adprep /forestprep" command on old server.
    Please run the "adprep.exe /forestprep" command from the Windows Server 2008 installation disk on the schema master. To do this, insert the Windows Server 2008 installation disk, and then type the following command:
    Drive:\sources\ADPREP\adprep.exe /forestprep
    4. Upgrade the Windows 2003 domain schema with the "adprep /domainprep" command on old server.
    Please run the "adprep.exe /domainprep" command from the Windows Server 2008 installation disk on the infrastructure master. To do this, insert the Windows Server 2008 installation disk, and then type the following command:
    Drive:\sources\ADPREP \adprep.exe /domainprep
    5. Insert Windows Server 2008 Installation Disc in the new server.
    6. Run "dcpromo" on new server to promote it as an additional domain controller in existing Windows 2003 domain, afterwards you may verify the installation of Active Directory.
    Please refer to:
    How to Verify an Active Directory Installation in Windows Server 2003
    http://support.microsoft.com/kb/816106
    7. Verify the new server's TCP/IP configuration has been pointed to current DNS server.
    8. Enable Global Catalog on new server and manually Check Replication Topology and afterwards manually trigger replication (Replicate Now) to synchronize Active Directory database between 2 replicas.
    Please note: It will some time to replicate GC between DC, please wait some time with patience.
    9. Disable Global Catalog on the old DC.
    10. Transfer all the FSMO roles from the old DC to the new DC.
    Please refer to:
    How to view and transfer FSMO roles in Windows Server 2003
    http://support.microsoft.com/kb/324801
    11. Verify that the old DNS Server Zone type is Active Directory-Integrated. If not, please refer to:
    How To: Convert DNS Primary Server to Active Directory Integrated
    http://support.microsoft.com/kb/816101
    Note: Active Directory Integrated-Zone is available only if DNS server is a domain controller.
    12. Install DNS component on new server and configure it as a new DNS Server (Active Directory Integrated-Zone is preferred). All the DNS configuration should be replicated to the new DNS server with Active Directory Replication.
    13. Make all the clients change TCP/IP configuration to point to new server as DNS.
    14. You may configure TCP/IP on all the clients, or adjust DHCP scope settings to make them use the new DNS server.
    Please note: It is a good practice to make the old DC offline for several days and check whether everything works normally with the new server online. If so, you may let the old DC online and run DCPROMO to demote it.
    Hope it helps.
    Regards,
    Wilson Jia
    This posting is provided "AS IS" with no warranties, and confers no rights.

  • Windows server 2003 not working after computer hard restart

    Hello, the following problem did occure. I was logged to windows server 2003, working on it, when my pc suddenly frozen, so i had no other option, than to make a hard restart of my pc. From that time, when a log into the windows server, i can see the server
    desktop, but i cannot click on anything. I am hearing just the clicking sound. When i minimalize it a maximalize it back, all i can see is a black screen.
    Can anyone help me, how to solve this problem ?
    Thank you for your answers

    Hi,
    According to your description, my understanding is that Windows Server 2003 unable to start correctly.
    You may try to restart the computer, when you see the message Please select the operating system to start, press the F8 . select the
    Last Known Good Configuration, in order to start the computer by using the most recent settings that worked.
    Or you may select Windows Advanced Option –> Safe Mode, check to see if this was caused by faulty drivers, programs, or services that start automatically.
    More methods about troubleshooting startup problem, you may reference the link below:
    How to troubleshoot startup problems in Windows Server 2003
    http://support.microsoft.com/kb/325375/en-us
    Best Regards,           
    Eve Wang   

  • Use Windows Server 2003 or 2008 with BootCamp?Just want to run basic things

    Hey, well I can get a copy of Microsoft Windows Server 2003 and 2008 with the DreamSpark program (as I am in college) for free. But my question is, is this a good idea to use with my MacBook Pro? I wasn't sure how well it'd work with Boot Camp, and all I'd want is to just run basic programs and/or games.
    Is it a good idea? And does anyone have tutorials for how to install it?

    Hi,
    Windows Server 2003 and XP 64-bit share the same codebase and XP-64bit is not supported with BootCamp.
    Windows Server 2008 and Vista 64-bit share the same codebase and Vista 64-bit is only supported with BootCamp on some Macs. See here: http://support.apple.com/kb/HT1846
    For running 'basic' things with the Server versions, why not use one of the Virtualization apps like Parallels, VMWare Fusion or VirtualBox ?
    http://www.parallels.com/products/desktop/
    http://www.vmware.com/products/fusion/
    http://www.virtualbox.org/
    VirtualBox is open-source, so you don't have to pay for it.
    Regards
    Stefan

  • How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

    Dear All,
    We are having an infrastructure setup of around 500 client computers managed through group policy.
    Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
    Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
    It would be great if you can assist me with the following query.
    How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
    Can we disable Network Tab on the left hand pane ?
    explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

    >   * explorer.exe is blocked already, but users are able to enter the
    >     Windows Explorer by clicking on the name which is visible on the
    >     Start Menu.
    You cannot block explorer.exe when you do not replace the shell - the
    desktop you see effectively IS explorer.exe...
    Your requirement sounds like you need a custom shell:
    http://gpsearch.azurewebsites.net/#2812
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Unlocking user account...

    The Oracle 10g database seems to have locked a user out. The problem is that the user that has been locked out is the administrator and only the administrator can unlock a user.
    How to unlock an administrator?
    Thanks!

    If you are in Unix probably you can connect with the oracle user (the one that owns the oracle installation) and connect as "/as sysdba" and unlock the user.
    Example:
    /home/oracle] $ sqlplus
    SQL*Plus: Release 9.2.0.6.0 - Production on Tue Dec 19 18:49:36 2006
    Copyright (c) 1982, 2002, Oracle Corporation.  All rights reserved.
    Enter user-name: /as sysdba
    Connected to:
    Oracle9i Enterprise Edition Release 9.2.0.6.0 - 64bit Production
    With the Partitioning, OLAP and Oracle Data Mining options
    JServer Release 9.2.0.6.0 - Production
    SQL> alter user administrator account unlock;
    User altered.In windows you can do the following:
    D:\>set ORACLE_SID=DBA
    D:\>sqlplus /nolog
    SQL*Plus: Release 10.2.0.1.0 - Production on Tue Dec 19 18:56:41 2006
    Copyright (c) 1982, 2005, Oracle.  All rights reserved.
    connect /as sysdba;
    connect /as sysdba;> connect /as sysdba;
    Connected.
    [email protected]> alter administrator account unlock;
    User altered.
    [email protected]>Message was edited by:
    Delfino Nunez

Maybe you are looking for