Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

This definitely falls in the category of "You should know better."

I lost the domain controller on my home network a while back. I've been running my other computers (a desktop and laptop) without a DC since then, and it let's me login from the cached passwords. But this morning I brought the newly build domain controller online, and this evening I fired up my laptop. Well, of course, the new Active Directory service knows nothing about my old logins, and the laptop won't let me on.

So I go to the DC, and create the same user with the same password as before, but, I know, the security identifier's different, so the machine thinks it's a different users. After logging in to the local admin account on the laptop and joining the machine to the domain, I login as my regular domain user, and it creates me a new profile.

Well, of course, now I don't have access to any of my old files, and my local data is in the old profile.

So I logged in as local admin again, and granted permissions and ownership on my old C:/Users/dave directory to the new DOMAIN\dave user. And then, hoping to get my old profile back, I went into regedit and did a search for everywhere that it was pointing to the new profile directory (C:\Users\dave.DOMAIN) and changed it to point to the old one (C:\Users\dave). And then tried to login in.

I get "Group Policy Client service failed the login"/Access is denied.

I googled it, and found something about wiping out the profile by changing the Guid in the HKLM/Software/Microsoft/Windows NT/CurrentVersion/ProfileList, in hopes that it would create a new profile, but I think that may have made matters worse.

I still have admin access to the machine, so my data is not at risk, but short of backing up my data, reinstalling windows, and then copying the data back that I need, I can't seem to get on as me.

Any suggestions?

Thanks for rescuing me from my own foolishness.

share|improve this question

migrated from superuser.com May 16 '11 at 20:46

This question came from our site for computer enthusiasts and power users.

2 Answers 2

So first off, this is usually why you have two DCs in the environment, as Bad Things happen when you lose the DC and don't have a backup.

This on the surface seems like an easy thing to fix if you still have admin access to the files. Personally, I'd just stick with a new user account, and then move over all your files from the old profile into the new one.

Generally speaking, mucking about in the registry can only lead to more Bad Things as well. Usually...

share|improve this answer

What I actually ended up doing was deleting the whole profile from the ProfilesList registry key, rather than trying to trick into thinking it wasn't there. Then I renamed the profile directory on disk to something else, and logged in as my domain user. It created a new profile, which I could then copy files from the old one into. I still ended up with some registry problems, but mostly everything is working.

I wish I could have 2 DCs. But seeing as this a home network with my laptop, my desktop, and my PDC, explaining to my wife why I needed yet ANOTHER server was more than I wanted to undertake. Not to mention space under the desk for it and the budget to build it!

Thanks for your help.

share|improve this answer
    
You might look at using HyperV Server and giving yourself dual DCs as VMs instead. Keeps the wife happy because there is only one machine. But just need to put them on different drives for a bit of redundancy. –  MikeAWood May 30 '13 at 5:20

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.