[ExchangeList] Re: Moving Mailbox from Crashed server (BE) to healthy Server (BE)

  • From: James Chong <jchong@xxxxxxxxxxxxxx>
  • To: "exchangelist@xxxxxxxxxxxxx" <exchangelist@xxxxxxxxxxxxx>
  • Date: Sat, 13 Sep 2008 10:38:09 -0400

Reset what his account? You mean his account shows it’s locked in the account tab? If so; do you have a password lock out domain policy? If so; you will need to identify what is impersonating his account. From my experience it’s two sources. You will need to parse through your event viewer logs on all your DCs. You can use a utility called eventcomb to search all of them for you. It’s in a free Microsoft suite called secops; you can google and download.

 

You want to look for logs showing failed attempts 0xC000006A (Incorrect PW)  followed by a lock out (0xC000006A). 

 

1.       User has stale terminal server session that never logged off and is using his old credentials

2.       User’s own computer is running some processes.

 

1. Any services running as user’s account (type msconfig in start menu; go to services)

2. Any scheduled tasks. Start; programs; accessories; system tools; scheduled tasks

3. Is IIS installed on his workstation? Start run; type inetmgr; expand default website; properties; click directory security tab; click edit for anonymous access and authentication control. Is this running with your account?

4. Any run As Shortcuts

5. Any processes running during startup type msconfig in start menu; go to startup tab; do you recognize any processes that may be running as your account?

6. Double check stored passwords. Go to start run type rundll32.exe keymgr.dll, KRShowKeyMgr

 

 

James Chong
Sr. Systems Engineer
Simplexity, LLC.
11130 Sunrise Valley Drive, Suite 300
Reston, VA 20191
O (703) 657-4612
C (703) 863-1483
 

From: exchangelist-bounce@xxxxxxxxxxxxx [exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Kingsford Boateng [kingboat10@xxxxxxxxx]
Sent: Friday, September 12, 2008 11:38 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Moving Mailbox from Crashed server (BE) to healthy Server (BE)

Hi James,
Please I need your help, I have one particular email account on my exchange server which keeps locking up every day and I keep reset it.
Kindly help me solve this problem.
 
Thanks

--- On Sat, 9/6/08, James Chong <jchong@xxxxxxxxxxxxxx> wrote:
From: James Chong <jchong@xxxxxxxxxxxxxx>
Subject: [ExchangeList] Re: Moving Mailbox from Crashed server (BE) to healthy Server (BE)
To: "exchangelist@xxxxxxxxxxxxx" <exchangelist@xxxxxxxxxxxxx>
Date: Saturday, September 6, 2008, 3:24 PM

http://www.msexchange.org
-------------------------------------------------------What's the error
when the /disasterecovery failed? You can perform this without backup of C: or
systemstate of this computer (as long as AD is still alive) Maybe the
systemstate restore is bad or had corrupted registry. Rebuild without the system
state.

If you cannot get it to work; you always have an option of blowing away the
server object using adsiedit and just doing a new install using same name.





James Chong
Sr. Systems Engineer
Simplexity, LLC.
11130 Sunrise Valley Drive, Suite 300
Reston, VA 20191
O (703) 657-4612
C (703) 863-1483
________________________________________
From: exchangelist-bounce@xxxxxxxxxxxxx [exchangelist-bounce@xxxxxxxxxxxxx] On
Behalf Of Ravi Dogra [dogra.ravi@xxxxxxxxx]
Sent: Saturday, September 06, 2008 5:22 PM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Moving Mailbox from Crashed server (BE) to healthy
Server (BE)

http://www.msexchange.org
-------------------------------------------------------Hi,

I tried everything and it looks like that either i need to cleanup
(bad entries for .net framework and other components) my registry or
look for any other solution, other than resolving the problem.

Now, the only +ve is that i have my exchange database intact. want to
know how in can restore data or mailboxes for the mailboxes on crashed
server using best method available.


Thanks
RD


On Sat, Sep 6, 2008 at 10:30 AM, Ravi Dogra <dogra.ravi@xxxxxxxxx> wrote:
> Hi,
>
> Urgent Help needed!!!
>
> I have got one of my BackEnd server OS crashed and didnt have Backup
> of C Drive although i have backup of System State. After Restoring
> System State i got active directory restored but when i try to run
> Setup /DisasterRecovery it doesnt proceed.
>
> Problem is that i dont have my SMTP, IIS and WWW services started on
> this server... they are set to automatic and doesnt start. and it
> looks like its because i dont have my C Drive backup restored b/c i
> dont have one.
>
> I have another BE server which is healthy, is this possible to move
> mailboxes from crashed server to healthy server.
>
> Need Urgent Support!!!  the server crashed holds Mailboxes of People
> in Leadership :-)
>
> Thanks,
> RD
>



--
Ravi Dogra
9899647200
This e-mail, together with any attachments, is confidential. It may be
read, copied and used only by the intended recipient. If you have
received it in error, please notify the sender immediately by e-mail
or telephone. Please then delete it from your computer without making
any copies or disclosing it to any other person.
-------------------------------------------------------
List Archives: //www.freelists.org/archives/exchangelist/
MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp
MSExchange Articles and Tutorials:
http://www.msexchange.org/articles_tutorials/
MSExchange Blogs: http://blogs.msexchange.org/
-------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
-------------------------------------------------------
To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp
Report abuse to listadmin@xxxxxxxxxxxxxx
-------------------------------------------------------
List Archives: //www.freelists.org/archives/exchangelist/
MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp
MSExchange Articles and Tutorials:
http://www.msexchange.org/articles_tutorials/
MSExchange Blogs: http://blogs.msexchange.org/
-------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
-------------------------------------------------------
To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp
Report abuse to listadmin@xxxxxxxxxxxxxx


Other related posts: