I have a Windows Active Directory network in a LAN of addresses 192.168.10.0/24. I have another site that has addresses of 192.168.11.0/24, where all AD servers are in the 192.168.10.0/24 site (I know, bad!). Both gateways use Fortigate firewalls and are linked through a Fortinet IPsec tunnel so machines on both sides can access each other.
Accidentally a machine was configured with a static IP of 192.168.10.36 and was sent to the other side, where no IT department staff is available onsite. Now we cannot access the machine due to the wrong addressing, and the following solutions aren't working:
- Login as a local administrator, because it is disabled.
- Login as an AD administrator, because the machine cannot access the AD server.
- Change the routing table, because if we changed the address of the other side's firewall to 192.168.10.X, we will be knocked out.
What other options do we have? I am looking for:
- A way to change the IP address. There's a cached domain user that is able to login, but it is no admin. Or,
- A way to restore connectivity so we can login and change the IP address, or
- Any other solution that restores access to the machine.
EDIT: Just to clarify: for some reasons, shipping something to the other site is not possible right now...