How to restore the health of an AD domain?

Question

Active Directory

Is Windows Server 2012r2 on it the domain controller is lifted. A week ago, something happened that I was not known and there was no one to ask. When I started watching, I got a network with 100 PCs (all in the domain), some of which cannot log in locally or on the RDP server. It is locally treated by transferring it to the domain, but I cannot do this with RDP servers. Tell me how to fix?

Error when logging into RDP server

Errors in AD Server Manager

Answer 1

Officially - the microsoft solves this case only by re-introducing the machine to the domain. Unfortunately, this is the only sure way - all other artisanal methods may or may not work on a random machine (in the vast majority of cases, they don't). From what could happen - the most similar - a power failure, a system error on the controller, which led to a reboot. When the OS was loaded, it was restored automatically to the last available restore point, because. it goes by default the next time it is powered up after an unforeseen failure. This point was most likely created quite a long time ago, and a number of computers that updated passwords not so long ago ended up in the restored AD database with old passwords - accordingly, they lost the trust of the controller, because. shove the wrong passwords. It is solved only by perevvod of the machine in the domain. Do you only have one domain controller?

Answer 2

it is possible to try to recreate the lists of PC names in HELL!

Answer 3

netdom.exe resetpwd
You can try to reset the server password that the domain cannot enter through nltest Google
keys