General discussion

Locked

Domain Admin Password Recovery

By database ·
I have inherited a Win2000 Domain (Administrator in a coma for 2 months and only he knows password). I have used a local password reset and followed a method described at Petri.com and got into local admin, from where I ran msc DSA from dos prompt. Got into users and computers management, but the comatose admin has disabled local admin from changing domain users details and passwords. Is there a way I can reset the Domain Admin Password, or recover it - am at wits end and do not want to reload a new domain as it has 200 users in!

This conversation is currently closed to new comments.

29 total posts (Page 1 of 3)   01 | 02 | 03   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by wcp In reply to Domain Admin Password Rec ...

I recommend ERD Commander 2005 Server version from Winternals (www.winternals.com).
It may be pricey, but you need a tool that guarantees the system integrity after resetting the Administrator?s password.

Collapse -

by database In reply to

Poster rated this answer.

Collapse -

by p.j.hutchison In reply to Domain Admin Password Rec ...

You cannot change domain passwords using a 'local' user. You need to login with a user with at least Account Operator priviledges to change admin passwords on the domain.

Do you have ANY other users with some sort of priviledges other than 'Administrator'?

Collapse -

by database In reply to

I am still discovering who the users are (Private school with 400 students in the domain). It seems that the comatose systems admin was a security specialist prior to taking up the post at the college. I think he was a lone operator when it came to the colleges network!

Collapse -

by database In reply to

Thanks, The Petri solution worked for 90% of the solution, until we found that the sysadmin had removed the local admin rights from the domain. So we are in upto the Users & Computers in the active directory, with no rights to change anything (Trying to reset the Domain Admin Password at this point just gives a access denied for this operation.

Collapse -

by p.j.hutchison In reply to Domain Admin Password Rec ...

Well, looks like you have too options:

1. Wait until the comatose admin awakes and get him to give you the password.

2. Rebuild the domain.

Collapse -

by database In reply to

The poor guy has been in the coma for 2 months - and the doc says he will have lost most of his short term memory with the treatment and drugs he has been placed on - so rebuild on use LophtCrack - or try to export ldif, rebuild & import selected portions of the domain.

Collapse -

by DC1 In reply to Domain Admin Password Rec ...

Try L0phtCrack....there is a cost but it will get you the info you need.

http://www.atstake.com/products/lc/

Collapse -

by database In reply to

I will pose the $650 tab to the college and see what transpires (They have exams on the 25th of August and access to the server is necessary to retrieve the ICDL exam answers and results!

Back to Windows Forum
29 total posts (Page 1 of 3)   01 | 02 | 03   Next

Operating Systems Forums