Locked myself out of work computer

Sam Vimes

Because i'm an idiot, i was trying to connect my work laptop to the workgroup on my home pc to transfer files between them.

i didn't realise that would take me off the domain that i usually log in to. now when i start it up the only options i have after CTRL+ALT+DEL are the username and password and the drop down list for the domain is gone. and of course i can't log in


any suggestions?

feylya

Wait til tomorrow so your sys admin can add you back into the domain. Unless you happen to know the local admin password?

Ghost Train

if you were able to change to a workgroup, just do the reverse

log in to the computer, right click on "my computer", go to properties, click on computer name tab, click on change button, type in the domain

of course if you cant log in at all, might be tricky to do the above

Sam Vimes

eolhc wrote: »

if you were able to change to a workgroup, just do the reverse

log in to the computer, right click on "my computer", go to properties, click on computer name tab, click on change button, type in the domain

of course if you cant log in at all, might be tricky to do the above

i can't get past the login screen

feylya wrote: »

Wait til tomorrow so your sys admin can add you back into the domain. Unless you happen to know the local admin password?

i might call IT and ask. i'd rather not wait til tomorrow because i've stuff to do. are there any more suggestions in case they won't give it to me?

majiktripp

Try logging in in Safe Mode With Networking, see if you can log in as local Administrator with blank password (long shot but try it) then you can change the workgroup back to the Domain you were originally on,then restart and try logging in as normal.

ethernet

I've noticed when I login some places, username takes the form: DOMAIN_NAME\USERNAME. Might be worth a shot.

Sam Vimes

majiktripp wrote: »

Try logging in in Safe Mode With Networking, see if you can log in as local Administrator with blank password (long shot but try it) then you can change the workgroup back to the Domain you were originally on,then restart and try logging in as normal.

tried that. i really should have listed the stuff i tried

ethernet wrote: »

I've noticed when I login some places, username takes the form: DOMAIN_NAME\USERNAME. Might be worth a shot.

unfortunately not

lamaq

You really didn't need to remove the laptop from the domain but anyway now that it's done:

Your domain profile is still there under documents and settings. I'm guessing you have the local admin password?

You will have to bring the laptop into work and get your IT staff to join it to the domain tomorrow.

The easiest way to move files from your domain laptop to local pc is to create a shared folder on the local pc giving everyone write access. When you've copied the files accross from the laptop stop the share. There are lots of other ways to do this.

Sam Vimes

lamaq wrote: »

You really didn't need to remove the laptop from the domain but anyway now that it's done:

its windows 2000 so maybe its different. there were two radio buttons and selecting the workgroup de-selected the domain.

lamaq wrote: »

Your domain profile is still there under documents and settings. I'm guessing you have the local admin password?

You will have to bring the laptop into work and get your IT staff to join it to the domain tomorrow.

The easiest way to move files from your domain laptop to local pc is to create a shared folder on the local pc giving everyone write access. When you've copied the files accross from the laptop stop the share. There are lots of other ways to do this.

i don't have the local admin password. basically the solution to the problem is give it to the IT department then?

lamaq

No it being Windows 2000 doesn't make any difference. Your domain account must have been a local administrator otherwise you would not have been able to take it off the domain.

There is a way to reset the local admin password (you can google it yourself) but you may have to explain yourself to your IT staff tomorrow. Aside from that you're out of options.

majiktripp

You could use this
www.google.com
to Reset the Administrator Password to whatever you want and then log into safe mode with networking and rejoin the Domain.
A bit of hassle but you may or may not want to try it.

Sam Vimes

majiktripp wrote: »

You could use this
www.google.com
to Reset the Administrator Password to whatever you want and then log into safe mode with networking and rejoin the Domain.
A bit of hassle but you may or may not want to try it.

well i was hoping for a way of doing it without resetting the admin password

none of those tools seem to work anyway because the hard drive is encrypted. i'll just wait and give it to the IT people

rmacm

Looks like you'll be calling the wonderful people at HP tomorrow Commander Vimes....Pointsec is a pain in the tits isn't it

Jumpy

You cannot rejoin a domain without domain admin rights. You might get the IT guys giving you hassle for trying to connect to your home network, but I doubt it, if they arent savvy enough to deny users local admin rights then I dont think they will give two hoots.
Just take it to them tomorrow.

Sam Vimes

rmacm wrote: »

Looks like you'll be calling the wonderful people at HP tomorrow Commander Vimes....Pointsec is a pain in the tits isn't it

tis indeed

Jumpy wrote: »

You cannot rejoin a domain without domain admin rights. You might get the IT guys giving you hassle for trying to connect to your home network, but I doubt it, if they arent savvy enough to deny users local admin rights then I dont think they will give two hoots.
Just take it to them tomorrow.

i need admin rights for the job. As it turns out a particular leg end dairy boards user who works in the same place pm'ed me to tell me what the default password is. Its fairly obvious so i should have thought of it but i refer you to my first post

Commander vimes wrote:

i'm an idiot

kaimera

Man sucks to be you.

Jumpy

You never need admin rights for the job. It just means your IT design isnt any good.

AdrianII

you need a domain admin to re join you to the network with there un and pw

kippy

A few things:
1. You do not have to be a domain admin to add a PC to a domain.
http://www.lockergnome.com/windows/2005/01/21/giving-a-user-the-ability-to-add-a-computer-to-the-domain/

2. I assume your laptop is currently at home. It is extremely difficult (Impossible) to add your laptop to a domain when there are no domain controllers available for that domain, as I assume the situation would be in while you are at home.

3. You should be able access files when you have the local username and password.

4. Your IT people should help resolve the issue and when the do it'd be a good time to get some tips off them in regards ensuring that this doesnt happen again (one thing that springs to mind would be to use a USB key(if possible)) to transfer files between machines.

Kippy

Jumpy

Kippy, number 1 is with delegated rights. Any network admin who has their domain set up in such a manner is not concerned about security in the least. If the machine is locked with pointsec or another encryption software, then I assume there is is some security in his workplace (although why in gods name you would give a user admin rights is beyond me).
And passing local admin passwords to each other via the internet? You admit that to the network admin and you may be meeting with HR faster than you can blink.

Sam Vimes

Jumpy wrote: »

You never need admin rights for the job. It just means your IT design isnt any good.

you don't know what my job is. i might not absolutely need admin rights but it would be incredibly inconvenient if i didn't have them.

kippy wrote: »

A few things:
1. You do not have to be a domain admin to add a PC to a domain.
http://www.lockergnome.com/windows/2005/01/21/giving-a-user-the-ability-to-add-a-computer-to-the-domain/

it appears i do because i just tried to add myself back to the domain and it said access denied. they're sending someone from IT now

kippy wrote: »

2. I assume your laptop is currently at home. It is extremely difficult (Impossible) to add your laptop to a domain when there are no domain controllers available for that domain, as I assume the situation would be in while you are at home.

yes that was the situation

kippy wrote: »

3. You should be able access files when you have the local username and password.

i am

kippy wrote: »

4. Your IT people should help resolve the issue and when the do it'd be a good time to get some tips off them in regards ensuring that this doesnt happen again (one thing that springs to mind would be to use a USB key(if possible)) to transfer files between machines.

it was just a silly mistake that won't happen again. my usb key is broken and i didn't realise that adding myself to the workgroup would take me off the domain. i think i can safely say i'm just as qualified as anyone the IT department would send out tbh

Jumpy wrote: »

Kippy, number 1 is with delegated rights. Any network admin who has their domain set up in such a manner is not concerned about security in the least. If the machine is locked with pointsec or another encryption software, then I assume there is is some security in his workplace (although why in gods name you would give a user admin rights is beyond me).

well i could tell you what the job is and you'd understand but then i'd be telling random people on the net where i work

Jumpy wrote: »

And passing local admin passwords to each other via the internet? You admit that to the network admin and you may be meeting with HR faster than you can blink.

he didn't tell me the password, he hinted at what it was and only someone working in the company would have known what he meant

irishpartyboy

(a) You can't rejoin your machine to the domain, if the domain controllers (@ work) cannot be contacted. Simple As I'm afraid.

(b) If you don't know the local admin password, that's easily cracked. However it's a wasted effort, as situation A still applies.

You'll need to give it to your IT guys when your back in the office and they can do the required.


Brian