Server recovery breaking RAID 1
Wildwilly
Hardware= Dell SC420 CERC2 RAID controller configured as RAID 1 (Mirror)
Based on an earlier posting here titled "Mayday" I tried to use several
tools to recovery password. The programs did not recognize the drives
apparently due to the raid arrangement.
Query 1: If break the RAID leave drive 0 and remove drive 1. Then if I go
into the RAID setup utility and change to non raid will this drive be
recognized as a regular SATA drive and possibly be recognized by these
recovery programs?
Will doing this have any effect on the readability/bootability of disk 0
by SBS.
Query 2: If I take the removed drive 1 rejumper it to slave, install in
another machine will it then be read as just a regular SATA drive and will
the data not be lost?
Query 3: After trying this can I just rejumper drive 1 reinstall it in the
server and rebuild the mirror from the RAID setup utility and not have
damaged data on drive 0
Thanks for you assistance
Merv Porter [SBS-MVP]
the following:
-----------------------------------------------------------
Domain Administrator (and/or Local Administrator) Password Recovery Process
Operating Systems:
Windows 2000
Windows XP
Windows 2003
I. DSRM (Directory Services Restore Mode)
If the domain Administrator password was changed from the Server Management
console, the local Administrator password should have remained unchanged
(SBS 2003 initially syncs the Domain Administrator and (DSRM) Local
Administrator passwords). If so, the procedure below should let you change
the Domain Administrator password and get you access to your server (you can
skip the first steps if the [DSRM] Local Administrator password has not been
changed by anyone).
II. Change Domain Administrator Password Procedure
Reference...
http://forum.s-t-d.org/viewtopic.php?pid=13450
To recover a lost/forgotten AD Domain Admin password:
1. If Needed: Boot DC with Knoppix S-T-D (see Part III below)
2. If Needed: Reset Local Administrator Password (chntpwd) - used for DSRM
access
3. Boot using F8 - Directory Services Restore Mode
4. Logon with Local Administrator username/password
5. Launch Regedit & navigate to:
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/Spooler
6. Change ImagePath value to:
c:\windows\system32\cmd.exe /k net user administrator pAssword /domain
7. Reboot and wait for the error from the print spooler failure
8. Logon with your newly set Administrator password (pAssword - case
sensitive)
9. Undo registry setting in step 6 or printing will not work.
10. Start Print Spooler Service
11. If desired, reset Domain Administrator password using Console
III. KNOPPIX Change Local Administrator Password Procedure
If you do not know the (DSRM) Local Administrator password for the server or
you suspect that it has been changed, go to:
http://mirror.cs.vt.edu/pub/Knoppix-STD/
download the .iso and create the CD. Then follow the instructions at:
http://www.astahost.com/how-reset-nt-password-using-knoppix-std-t8716.html
to reset the (DSRM) local Administrator account password
(using Knoppix, the username "Administrator" is case sensitive, so if you
see a cap letter on the "A", take note to type it that way when you specify
the account to reset the password).
The instructions at this web site are for Windows 2000, so when you get to
the part that says:
Type: cd /mnt/hda2/WINNT/system32/config (Win2000)
Instead use:
Type: cd /mnt/hda2/WINDOWS/system32/config) (WinXP, Win2003)
--------------------------------------------------------
KNOPPIX STEPS - CONDENSED
1. Boot on Knoppix CD
2. Right-click on the desktop and select XShells>Root Aterm
3. Type: cat /etc/fstab
4. Type: mount -o rw /dev/hda2 /mnt/hda2
("/dev/hda2 /mnt/hda2 ntfs" is the target hard drive; it may be "hda1" or
another designation)
5. Type: cd /mnt/hda2/WINNT/system32/config (Win2000)
or, Type: cd /mnt/hda2/WINDOWS/system32/config (WinXP, Win2003)
6. Type: ls -l (both instances are lower case "L")
7. Type: chntpw
8. Type: chntpw -l sam system security
9. Type: chntpw -u Administrator sam system security
(case sensitive, so use uppercase "A")
10. Do you really wish to disable SYSKEY? (y/n) [n] n
11. Please enter new password: *
(* = Blank Password; you can specify a secure one)
12. Do you really wish to change it? (y/n) [n] y
13. Write hive files? (y/n) [n] : y
14. From the desktop right-click > reboot
(or, if problematic, just pull the plug and reboot the machine)
IV. RESYNCING DSRM and Domain Administrator Passwords
SBS 2003 syncs the domain administrator password with the local
administrator (DSRM) password when you install it. If you want to resync
it, use the KB article below to reset the DSRM password to match the new
Domain Administrator password (not necessary, but for disaster recovery you
should record the DSRM password somewhere if it's different from the Domain
Administrator password)
How To Reset the Directory Services Restore Mode Administrator Account
Password in Windows Server 2003
http://support.microsoft.com/kb/322672
-----------------------------------------------------------
--
Merv Porter [SBS-MVP]
============================
"Wildwilly" <Wild...@discussions.microsoft.com> wrote in message
news:94BA8C2C-1BF1-400A...@microsoft.com...
Wildwilly
find or recognize any drives. That is why I was asking about breaking the
mirror, trying to get the drives recognized by Knoppix. Any suggestions on
getting the drives recognized.?
Wildwilly
loaded. That is why I was inquiring the effects of breaking the mirror. I
want to make the drives visible to Knoppix. Any suggestions ?
Lanwench [MVP - Exchange]
> I am trying to recover a server with lost Domain Admin Password.
>
> Hardware= Dell SC420 CERC2 RAID controller configured as RAID 1
> (Mirror)
>
> Based on an earlier posting here titled "Mayday" I tried to use
> several tools to recovery password. The programs did not recognize
> the drives apparently due to the raid arrangement.
>
> Query 1: If break the RAID leave drive 0 and remove drive 1. Then
> if I go into the RAID setup utility and change to non raid will this
> drive be recognized as a regular SATA drive and possibly be
> recognized by these recovery programs?
I'm honestly not sure if that would work....but before proceeding with this,
I suggest you try
other methods. See below.
>
> Will doing this have any effect on the readability/bootability of
> disk 0 by SBS.
>
> Query 2: If I take the removed drive 1 rejumper it to slave, install
> in another machine will it then be read as just a regular SATA drive
> and will the data not be lost?
>
>
> Query 3: After trying this can I just rejumper drive 1 reinstall it
> in the server and rebuild the mirror from the RAID setup utility and
> not have damaged data on drive 0
>
> Thanks for you assistance
Look at BartPE / Ultimate Boot CD....or see if you can download the ISO
somewhere if you don't want to build your own
I have a UBC created for me by a friend & it allows you to load
drivers/etc., so it might then allow you to reset the password.
Merv Porter [SBS-MVP]
How do I add a third party SATA driver to KNOPPIX at boot
http://www.knoppix.net/forum/viewtopic.php?t=11824&highlight=sata
--
Merv Porter [SBS-MVP]
============================
"Wildwilly" <Wild...@discussions.microsoft.com> wrote in message
news:6EF1E6BA-47C2-4742...@microsoft.com...
WildWilley
the BARTPE although the instructions on how to do that are very sparse.
As I understand the BARTPE its based on Windows and I suspect I will not be
able to locate the SAM files. If I understand the process I need to
access the NTFS files with a Linux variant to be able to see the SAM files.
I will keep you posted on the progress.
"Lanwench [MVP - Exchange]"
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:ejpA9v7y...@TK2MSFTNGP04.phx.gbl...
WildWilley
whatever progress I make this afternoon.
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:u2eivG8y...@TK2MSFTNGP02.phx.gbl...