SBS 2003 server admin rights dont work access denied on VSS and Network settings

Hi I have just taken over support for a company and have inherited a SBS 2003 Server.
The server has had no backup for over a year (when the last admin left).
VSS does not work, so the back does not work, unable to install any other backup as no admin rights.
I want to repair it so I can do a backup to move to a new server.
I did not know the administrator account password (the last admin didn't tell anyone)
So I used a password reset boot cd and then restarted Windows 2003 in Directory Service Restore Mode.
Copied SRVANY and INSTSRV to a temporary folder, mine is called D:\temp. Copied cmd.exe to this folder too. Next ran at a command prompt instsrv PassRecovery "d:\temp\srvany.exe"
next
Started Regedit, and navigated to
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PassRecovery
 Created a new subkey called Parameters and added two new values:
name: Application
type: REG_SZ (string)
value: d:\temp\cmd.exe
name: AppParameters
type: REG_SZ (string)
value: /k net user administrator 123456 /domain
"123456 is substituted for the password I used" Im not daft enough to publish it lol
Next
opened the Services applet (Control Panel\Administrative Tools\Services) and opened the PassRecovery property tab. Checked the starting mode is set to Automatic.
to the Log On tab and enable the option Allow service to interact with the desktop.
Restart Windows normally, SRVANY run the NET USER command and reset the domain admin password.
OK so now I am logged in as administrator but guess what I still don't have admin rights???
I can add new user with admin rights and log in as them but they still don't have admin rights Im totally lost??????????? Help please

I'm thinking the previous tech may have renamed the built-in domain Administrator and then created a new account called 'administrator' with lesser rights?  He then used another domain admin account to manage the server. 
If so, and given the fact that you don't know any domain admin account usernames or passwords, I think you may be in for a move to a new server without a proper NT backup of the SBS 2003. 
However, If you can at least log into the SBS 2003, I wonder if you could download and run DIsk2VHD and create VHDs (not VHDX) of the current SBS 2003 drives, saving them to an external USB drive connected to the server. 
You could then 'attach' the VHDs to a Win7 Pro computer and gain access to the files/folders, although not the Active Directory stuff.  Moving Exchange and Sharepoint would impose additional pain.  For Exchange, you could log
onto workstations as each user and export their Exchange mailboxes as .PSTs.  I believe you could do the same with any Public Folders.
Disk2VHD
http://technet.microsoft.com/en-us/sysinternals/ee656415.aspx
How to Mount a Virtual Hard Disk in Windows 7
http://www.online-tech-tips.com/windows-7/mount-vhd-windows-7/
Of course, the owner could also have his attorney contact the previous tech and threaten legal action unless he coughs up the correct domain admin username and password.  That username and password belong to the owner, not the
tech.
Merv Porter
=========================

Similar Messages

  • Should Netweaver Admins have local server admin rights?

    Our netweaver tech admins also have local server admin rights on all of our SAP servers. 
    Why would these need this access?

    This doesn't sound very secure.  In the scenario you described, multiple netweaver tech admins would be sharing the <sid>adm account and password. 
    Would this be considered standard practice in an SAP environment?  Would the <sid>adm ID be a Firecall only type of ID?
    Edited by: Joe Hanold on Apr 28, 2008 4:05 PM

  • OLE DB or ODBC error: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied

    Hi,
    I have one client and one server.  In both hosts I created an OS-user named User1.
    The user have been given various role under the prefix SQLServer2005.
    The default instance of SQL Server and instance (background-process) of
    Analysis Service are also run under User1.
    I connected via Management Studio to Analysis Service directly in the
    server.  I set the permission to access Analysis Service to Everyone. 
    This means everyone should be able to use Analysis Service.  I have set
    ODBC data source to the server.  Testing was successful.
    I created a project to create a cube.  The tables are fairly small (total 300 MB, biggest one 290).
    On project setting (created at client) I set the server host as
    deployment target. I managed to deploy project when all I have are Data
    Source and Data Source Views.
    But on deployment I always failed.   The errors remain the same, begins with
    OLE DB error: OLE DB or ODBC error: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.; 08001.
    I have tried 4 combinations of Impersonation :
    (A) Use a specific username and password
      * in which I supply User1 and the password of User1
    (B) Use the service account
    (C) Use the credentials of the current user
    (D) Default
    Why is this? The server does certainly exist.  I think the error message is wrong.
    I have seen 3 posting that seems related.  One of them say the solution is giving the right impersonation, but gave no detail.  About the privilege, User1 are granted the role of
    SQLServer2005MSOLAP.  What is the solution?
    Thank you,
    Bernaridho

    I just had this problem and solved it by creating an alias in SQL Server Configuration Manager, as below:
    Scenario: My SQL server is accessible from the internet under my.domain.com, and from itself at ServerName. But the local network can't see itself through the router at my.domain.com, so the deployed project is unable to process the cube, since that would
    require Analysis Services to be able to see the SQL Server at my.domain.com, which it can't do.
    So I changed the server in my project from my.domain.com to ServerName, and I created a local alias to ServerName in SQL Server Configuration Manager, under SQL Native Client 11.0 Configuration, Aliases. In my case, I pointed it to localhost port 1333, and
    used SSH -L 1333:my.domain.com:1433, but I could have pointed the alias directly to the server, just as well. (Verifying... yes, that worked too, so you can forget SSH if you have no interest in it.)

  • SQL Server does not exist or access denied - periodic error

    Hi There,
    For the last week or so, I have been getting periodic errors on my sites powered by MSSQL databases. The error message is as follows:
    Microsoft OLE DB Provider for SQL Server error '80004005'
    [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.
    Usually, a quick refresh, and everything works fine again.
    My host doesn't know what has caused the issue, but has dug up this microsoft link: http://support.microsoft.com/kb/907264
    Most of that tech speak is beyond me! I use Dreamweaver - does anybody know if the standard dreamweaver connections or cursors contravene the advice on that page, and if so how to fix it?
    If not, does anybody know where to look to solve this issue?
    Thanks,
    Dan 

    I had this same problem and on a hunch I deleted the brackets
    so that the connection string instead of being,
    "Persist Security Info=False;Data
    Source=[THESERVER\SQLEXPRESS];Initial Catalog=[AdventureWorks];User
    ID=[ATEST];Password=[kjdkjdkjd]"
    is now,
    "Persist Security Info=False;Data
    Source=THESERVER\SQLEXPRESS;Initial Catalog=AdventureWorks;User
    ID=ATEST;Password=kjdkjdkjd"
    This was in Dreamweaver 8.

  • Can't Create a Data Source - Failed to test connection. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied

    Hi there,
    I am having a serious issue with The Power BI Data Management Gateway which I am hoping that someone can help me with.
    Basically I am setting a connection between a Power BI demo site and a SQL 2012 Database based on Azure. The Data Management Gateway and is up and running, and Power BI has managed to connect to it successfuly.
    By following the tutorials at
    here I was able to successful create my Data Connection Gateway with a self-signed certificate.
    However, when trying to create the data source I come into problems. The Data Source Manager manages to successfully resolve the hostname, as per the screenshot below:
    Bear in mind that I exposed the require ports in Azure as endpoints and I managed to modify my hosts file on my local machine so I could access the SQL server hosted in Azure using its internal name -- otherwise I would not be able to get this far.
    However the creation of the data source also fails when trying to created it whilst logged in the SQL server in question:
    The Data Source Manager returns the error when using the Microsoft OLE DB Provider for SQL Server:
    Failed to test connection. [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied
    I tried using the SQL Server Native Client 11.0 instead but I also get an error. This time the error is:
    Failed to test connection. Login timeout expiredA network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online.Named Pipes Provider: Could not open a connection to SQL Server [53]. 
    Some considerations
    If I provide an invalid username/password, the Data Source Manager does say that the username and password is incorrect.
    Firewall is turned off in the SQL Server (either way, this error also happens if I try top use the Data Source Manager whilst logged in the SQL Server itself).
    SQL Profiler does not show any attempt of connection.
    The SQL server instance in question is the default one.
    The error happens regardless if I select the option to encrypt connection or not.
    In SQL Configuration manager I can see that all protocols are enabled (TCP/IP, Named Pipes and Shared Memory.
    The Event Viewer does not provide any further errors than the one I have copied in this post.
    I'm at a loss here. Could someone please advise what might I be doing wrong?
    Regards,
    P.

    Here is what I had to do to solve this issue:
    Basically I had to add the MSSQL TCP/IP port as an end-point in Azure. After I did that, then I was able to create the data-source. However, I was only able to authenticate with a SQL account, as any domain account would return me an error saying that the
    domain isn't trusted.
    What puzzles me here is how come the Data Source Manager would inform me that an account username/password was invalid, but it would fail/timeout if I provided valid credentials (!?!?!!?)

  • "server does not exist or access denied"

    On a particular family-oriented website, I keep getting this message when I try to access the site:
    Microsoft OLE DB Provider for ODBC Drivers error '80004005'
    [Microsoft][ODBC SQL Server Driver][DBNETLIB]SQL Server does not exist or access denied.
    /Include/ADOHelper.asp, line 137
    No idea why, been there before, and this isn't a site anyone would have a reason to restrict. Any ideas would be helpful.

    First see if SQLServer is up and running
    Go to start-> run in machine where sql is installed and type services.msc
    In services list check if SQLServer service is present and is running. If not started, start it and make start mode as Automatic
    Please Mark This As Answer if it solved your issue
    Please Vote This As Helpful if it helps to solve your issue
    Visakh
    My Wiki User Page
    My MSDN Page
    My Personal Blog
    My Facebook Page

  • [Microsoft][ODBC SQL Server Driver][DBNETLIB]SQL Server does not exist or access denied.

    Hi, I've seen questions about this error posted elsewhere but I'm not sure if the same issues applied.
    I'm trying to connect to SQL Server from a VBA macro in excel. I've managed to do this with the code below where my query is return to cells in my active worksheet but for another query I want to run the data to be return is too large for Excel to handle
    and so I'd like to save it as a .csv file but using the second example of my code I get the message "[Microsoft][ODBC SQL Server Driver][DBNETLIB]SQL Server does not exist or access denied". Since I have access to this database from the first example
    of the code, I assume my conn.ConnectionString line of code is letting me down.
    Can anyone help me please?
    'Code to return data to worksheet'
    Sub macro2()
    With ActiveSheet.ListObjects.Add(SourceType:=0, Source:=Array(Array( _
            "ODBC;DSN=SQLRA - OPENBET;UID=user1;Trusted_Connection=Yes;APP=Microsoft Office 2013;WSID=pdfdf3001;DATABASE=open;Network=DBMSS" _
            ), Array("OCN;Address=SQLRA_DB,55455;ApplicationIntent=READONLY;")), _
            Destination:=Range("$BG$1")).QueryTable
            .CommandText = Array( _
            "select  A.ev_oc_id, B.ev_mkt_id, A.ev_id, D.start_Time, Upper(Replace(A.[desc],'|','')) , A.result, COALESCE(A.sp_num, A.lp_num) , ", _
            "COALESCE(A.sp_Den, A.lp_Den) from open.reporting.tevoc A, open.reporting.tevmkt B, open.reporting.tevocgrp C, open.reporting.tev D ", _
            "where  A.ev_mkt_id = B.ev_mkt_id and B.ev_oc_grp_id = C.ev_oc_grp_id and D.ev_id = A.ev_id and Upper(Replace(D.[desc],'|','')) = 'home' and upper(B.name) = '|today|' and D.ev_type_id in (264, 289) and D.ev_class_id = 49
    and D.start>= '" & Year & "-" & Month & "-" & Day & "'" _
            .RowNumbers = False
            .FillAdjacentFormulas = False
            .PreserveFormatting = True
            .RefreshOnFileOpen = True
            .BackgroundQuery = True
            .RefreshStyle = xlInsertDeleteCells
            .SavePassword = False
            .SaveData = True
            .AdjustColumnWidth = True
            .RefreshPeriod = 0
            .PreserveColumnInfo = True
            .ListObject.DisplayName = "Table_Query_from_SQLRA___OPEN_1"
            .Refresh BackgroundQuery:=False
        End With
    End Sub
    'Code that produces error'
    Sub macro1()
    Dim conn As ADODB.Connection
    Set conn = New ADODB.Connection
    Dim testSQL As String
    Dim qd As DAO.QueryDef
    Dim openbetdb As Database
        conn.ConnectionString = "driver={SQL Server}; server= sqlra_db;uid=user1;APP=Microsoft Office 2013;WSID=pdfdf3001;database=openbet"
        conn.Open
        testSQL = "SELECT * FROM open.reporting.TevType where ev_class_id = 49 and ev_type_id in(289,330,518,13492);"
        Set qd = Db.CreateQueryDef("tmpExport", testSQL)
        DoCmd.TransferText acExportDelim, , "tmpExport", "C:\\export.csv"
    End Sub

    Hello,
    Are you connect to remote SQL Server? If so,
    please make sure the target SQL Server is running and is listening on appropriate protocols. Please take a look at the following article about general steps to troubleshoot
    SQL connectivity issues:
    http://blogs.msdn.com/b/sql_protocols/archive/2008/04/30/steps-to-troubleshoot-connectivity-issues.aspx
    Regards,
    Elvis Long
    TechNet Community Support

  • [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.

    I using SQL 2000 on Server 2012 in named instance. when i connect locally, it's ok, but when try to connect from network it generates error [DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.

    Hi Sayed Abdul Latif,
    As other post, SQL Server 2000 was out of support since April,2013. You can try to install SQL Server 2005 or later version. In addition, since the issue regards SQL Server Data Access. I will help you post the question in the related forums. It is appropriate
    and more experts will assist you.
    According to your description, you can only connect to SQL Server locally, I recommend you check if the TCP/IP and Named Pipes are enabled in SQL Server Configuration Manager. And the SQL Server is set to allow remote connection. Then restart the SQL Service
    and check if you can connect to SQL Server remotely.
    Additionally, we also need to verify if the SQL Server named instance is in a cluster, and connect to it by using the "servername\instancename" syntax, then you receive the above error message. If yes, you have to hardcode the TCP port or the Named Pipe
    of the SQL Server named instance. For more information, you can review the following article.http://support.microsoft.com/kb/888228/en-us
    Thanks,
    Sofiya Li
    Sofiya Li
    TechNet Community Support

  • My IPAD won't accept my wi-fi password. I have tried resetting all settings and network settings but still won't accept it. Can't download to new version of IOS either, says software update server could not be contacted.

    my IPAD won't accept my wi-fi password. I have tried resetting all settings and network settings but still won't accept it. Can't download to new version of IOS either, says software update server could not be contacted.

    Yes I have put in the correct password, its all numbers so can't get it wrong really.
    It has connected before as has my iPod and that won't connect either. I have checked that they aren't on the blocked list of the wi fi. Managed to download the new version of iOS and that hasn't made a difference.
    I have the wi fi plugged directly into the computer rather than the booster hub as the computer won't connect to it when its in the hub. I did get the iPad to connect to the internet when it twas in the hub but once I upgraded the iOS it won't accept the wifi password in the hub either.

  • If you were going to use an XServe as a (gulp) SBS 2003 Server

    would you keep an OSX partiion??
    I'd LOVE to get rid of my Dell box, which handles my accounting and security. My idea is to get an XServe (smaller rack presense, easier to maintain, etc) and install SBS 2003 on it, then "sell the Dell". My cabinet would look a LOT better with NO DELL boxes.
    I'm thinking about only one partition for Windowze so I don't have to administrate another OSX station (that can only be accessed with a re-start anyway).
    My plan would be to burn the BootCamp drivers first, start-up from the Windowze CD, erase the OSX drive, format the drive and install a fresh SBS 2003. Then install the BootCamp drivers...
    Any reason this shouldn't work??
    MacPro 3gig   Mac OS X (10.4.9)

    Certainly a trail blazer
    So a couple important things to note about the whole Boot Camp thing:
    1) If it works and you can boot to Windows 2003 server, still, there may be devices that do not work because there will be no drivers for the embedded hardware. Some work on your part.
    2) If somehow this should become supported, note Boot Camp is beta software and drivers will not ever be final for Tiger. To get the "final" drivers you'd need to upgrade to Leopard.
    I'd be interested to hear how your experience goes. I admire your dedication to using the wonderful Apple hardware but you're going out a bit on a support limb. Actually there's no limb at all.. you're more like a pole climber at a lumberjack competition

  • User with admin rights can't access files through the command prompt

    I have a strange situation where I have 2 users both setup exactly the same with admin rights on a 2003 (32 bit) server through an AD group membership, but one can do everything as expected but the other can't.
    The one that can't is trying to execute a program is a command prompt and keeps getting access denied or invalid directory when trying to cd into the folder.   I double and tripled check the permissions and they are correct, this person should have
    full admin.  In fact I did a effective permissions through explorer and it states full rights.  Along those lines this person can also access the folder in question through explorer just not a command prompt. 
    Has anyone seen this before ? and if so what can be done about it.
    Thanks

    Hi,
    Can the user execute the program through explorer? In Windows Server 2003, the Users group does not have Read and Execute permissions to the command processor (Cmd.exe). 
    You could refer to the article below to resolve the issue:
    "Access is denied" error message when you run a batch job on a Windows Server 2003-based computer
    http://support.microsoft.com/kb/867466
    Best Regards,
    Mandy 
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Problems in connecting to Windows SBS 2003 server from OSX 10.5.x

    Hi there
    Out of many Macs (all 10.5.4) in our network, I have been able to authenticate others to the Active Directory and share File services of the Windows Small Business Server (SBS) 2003. But one is having problems. They have authenticated to the active directory correctly from Directory utility.
    But when I try to access the SBS server, there is a message "Connecting to smb://myserver..." displayed for indefinite time. Also, I don't find the smb listed in Directory utility. Is that a problem? If so, how can it be fixed? I searched Internet but couldn't find a way to download smb client.
    Please help.

    It certainly works for me although I have 10.5.2. No special settings, just server address, username and password and it connects. To confirm I just tried it once more a moment ago by creating a new VPN configuration. No problems at all. Is your problem related to a single computer or is it so that now 10.5 computers can connect?

  • SBS 2003 Server & email

    Hi everyone!
    This is my third post regarding not being able to set up my email and I found out a little more info today. We are using SBS 2003 for a server and this is maybe why I'm having problems. We use excange and access our email with Microsoft web access away from the office. I was told that I may have to buy additional software and run a seperate computer just for the Blackberry. Does anyone know if this is true? The problem is that I keep getting a message saying a connection could not be made and to check the server name is correct and available. I know the server name is correct. We have a small office and ther will only be 3 of us using Blackberries. I told my boss how nice they are and easy to use so I'm trying to not eat my words. If anyone can help I sure can use it.

    I have read your older posts as well. I would suggest calling your service provider BB support, and since you cant set it up, they will transfer you to RIM support, who will give you the root cause of the issue.
    Now as a workaround you can create a blackberry.net email address on your BIS account and change the reply to  address to your '[email protected]' address and then set up forwarding rule on your exchange server. Hope this helps.
    Click on KUDOS to appreciate our efforts and mark the thread RESOLVED if your issue is resolved.

  • AD users losing admin rights when working offline.

    We have recently started using AD accounts on our Macs but a critical problem has presented itself.
    Under 'Allow administration by' we are using a domain group called 'Domain Users' and this works fine when users are connected to our corporate network but when they are offline and not able to see the AD servers at login they lose their admin rights.
    So even if you create a mobile account this settings has to be validated every time the user logs on.
    It has been suggested to use the following command to correct the problem but this has no effect:
    "sudo dseditgroup -o edit -a "domain\groupname" -t group admin"
    Has anyone successfully found a workaround for this problem?

    Yep.  That is the side effect of the evolution of AD integration.  Many more things are live look ups.  Have you tried password protected screen savers yet?  Yep, live call to AD.  The reason this is failing is the domain users is an AD group and the system can not resolve the GUID without access to the domain.
    In any case, there is a way around this but it is a little messy and it breaks the whole point of using the plug in to allow for a single point of control.  If you are using cached credentials, you should be able to add the user to the admin group.  Once again, this posses a number of problems as you are now injecting an AD user into a local account, you have no centralized method of removing admin rights from the user, and each machine requires a custom command (you need to issue the users shortname).
    Now, you other option is to say, "it is a security implementation to prevent unauthorized access to the machine when it is not under the protection of out LAN."  Yep, line of garbage, but the real question is, why do they need admin rights?  If for installing software, that likely should not be up to them if you are enforcing a corporate standard.  I generally can't find a good argument for permitting admin rights.

  • All logins slow/failed, even local server admin won't work...

    I've had an issue last Friday which reoccurred this morning concerning logins. Any logins on the network don't work, but take forever to come up with an error message. So I went to the server locally and tried the admin account there, but it hung as well (pinwheel for a few minutes, then spinning gear indefinitely). On Friday, a hard reboot seemed to fix the issue. Today, after hard rebooting, I could log in locally, but upon opening Server Admin, my server's info never came up (showed connected, but no info came up (in the software/hardware/etc area on the first page) and no services were listed. No network accounts could log in at this time (would take a minute and then the generic "Cannot log into this account due to an error").
    Did another restart (via the apple menu this time) and everything is working fine for now. I couldn't find anything in any logs to indicate a problem (although it seems several logs restarted with the server restart).
    Most clients are 10.6.2, a few are 10.5.8 and one is 10.4.11.

    Happened again this morning. Hard restart seemed to fix it, but the RAID with the home folders on it took (3-drive RAID in the XServe, OS is on a separate solid state drive) about 5 minutes to mount.
    Most logs seemed to have reset on the restart. There was no server system log at all or a DCHP system.log.
    OD LDAP log's first line was "nse error = 2". Everything after that was after the restart.
    OD Password Service Error log was full of "Unknown listener exception error." All entries were since the restart.
    Couldn't find any other anomalies in any logs (although, like I said, most of them don't seem to exist anymore.
    Now, I don't know if it's related, but the green light on the center RAID drive is off, but it seems to check out fine in System Profiler and Disk Utility. The blue access light works. I just figured it's a bad LED, but seems possibly related if the RAID's losing connection somehow (which could explain logins not working and its slow mounting behavior).
    Any ideas would be greatly appreciated as this is really bringing us to a standstill.

Maybe you are looking for

  • Reading AI on a usb-6008

    Hello I'm making a thread in my program which is listening on the AI ports on my usb-6008. The point of this thread is that if the voltage on the port rises or falls it will trigger an event in the mainThread. Now for the question: When I initialize

  • Maximum length of query string for functions return a SELECT

    Hi all, I have a report that gets it's SELECT statement from a function, instead of being coded into the region. All was well but I suspect now I'm blowing some kind of limit as I'm getting an error :      ORA-06502: PL/SQL: numeric or value error   

  • Restricting access for top Hierarchy in queries

    Hello all, Since we have a top hierarchy that comes from R/3 in which every company from our organization is attached, is there any way to restrict users access in the queries and authorizations so that when a user runs a query and tries to access no

  • Keep tilda on top of wallpaper ("fork to background") ?

    Hi there, I'm running a lightweight system based on Openbox, tint2, PCManFM, and I use tilda as terminal emulator. I really love to have it on top of my wallpaper, but I also have an Openbox keybind which shows my desktop (minimize all opened applica

  • Encore  CS 3 did not recognite DVD-RW and DVD+RW

    HI Is there any one could burn DVD-RW or DVD+RW on Encore CS 3 ? It've got error when I burned these , I also have Nero 7. burned both of these DVD fine with the same DVD burner. Any help will be great . Thank you