Forum Discussion

StuartSmithz's avatar
StuartSmithz
Copper Contributor
Nov 26, 2024

Admin account Lockout

Hi All - I have been asked to implement password chages ppoicy at a site we support.  During this process I also setup account lockout policy after 5 invalid attempts  The option Allow Administrator ...
Group Policy
Windows Server
stuartsmithz87's avatar
stuartsmithz87
Copper Contributor

Thanks for the reply Kyazaferr.  This looks correct to put the issue right but the problem I am having now is getting into DSRM mode when i have no access to login to the server and choose msconfig or restart with the shift key etc.   I have tried booting the VM using an .ISO Image and choosing repair my server which gets me into the recovery console but then this does not show startup settings for me choose and allow me to see safemode etc and to get into DSRM.   Could you possibly suggest this to me also to allow access.

Thanks 

Stuart 

kyazaferr's avatar
kyazaferr
Iron Contributor
Nov 29, 2024
  • Select Command Prompt in the recovery options.
  • Run the following command to enable DSRM mode on the next reboot:
  • bcdedit /set safeboot dsrepair
  • Restart the server, and it should boot into DSRM.
  • Once you've resolved the issue, revert the change using:
  •  

bcdedit /deletevalue safeboot

  • stuartsmithz87's avatar
    stuartsmithz87
    Copper Contributor
    Dec 01, 2024

    Hi Kyazaferr -

    I got all the way through to DSRM - went to local group policy gpedit.msc and the options to allow administrator Account lockout are greyed out and cannot be changed.  If I try to open ADUC it says i need to be logged in with a domain admin account. 

    Any Idea's how to proceed ? is there anything in the registry I can do ?

Resources