@thegibson - impressively, not my failure , but my team mate somehow deleted everyone from domain/enterprise administrators.

The recovery was amazingly dumb. After several failed attempts to hack in and elevate privs one of us realized Tripwire ran as administrator. He threw together a batch script to add himself to domain admins and within minutes he was in.

In hind site we spent a lot of time hardening AD and the controllers. Don’t get to see that as much as I’d appreciate