General discussion

Locked

nt security

By npressley ·
i had a call from a customer who said he can't get in his server. for some reason it has been changed or something. is there any way to get in to reset password?
npressley@inetnow.net

This conversation is currently closed to new comments.

35 total posts (Page 1 of 4)   01 | 02 | 03 | 04   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

nt security

by fido In reply to nt security

There are thre answers to this situation that I can think of, I hope at least one of them is useful.

A1) The Microsoft text book answer
Rebuild your server.

A2) The cook-book answer
There is a utility freely available on the net called L0phtCrackhttp://www.l0pht.com/l0phtcrack) which has the ability to rip passwords out of the NT registry, rescue disk, and network packets. This may perhaps be able to extract the password from the NT server's registry. Of course access to the server console is aplus as doing it remotely can be painful.

A3) Last ditch answer
You could also try using the NT rescue disk generated when the NT server was installed to restore the SAM database. I wouldn't suggest it if this is a business critical server, but as aast resort before rebuilding the server you might want to try it.

Collapse -

nt security

by npressley In reply to nt security

The question was auto-closed by TechRepublic

Collapse -

nt security

by mkelley In reply to nt security

Also,
This doesn't help now, but it is helpful to have more than one admin level account on the server, perhaps two local admin logins, and two domain admin level logins. Don't forget to put the domain level logins in the local admin group. And if tis is a BDC, you don't need to worry about the local admin accounts.

Collapse -

nt security

by npressley In reply to nt security

The question was auto-closed by TechRepublic

Collapse -

nt security

by jhoward In reply to nt security

There are a number of utilities at www.winternals.com and www.sysinternals.com that allow you to change the administrator account (ERD Commander, ERD Professional, NTRecover & NT Locksmith). They aren't free but are worth the money when you considerhow much your time, and the time of your staff costs when they can't work while you rebuild the server.

Collapse -

nt security

by npressley In reply to nt security

The question was auto-closed by TechRepublic

Collapse -

nt security

by patfa In reply to nt security

Is it a BDC, PDC, Stand alone? There would be different courses of action depending on the role the server plays in your domain.

Did the customer forget his password? If so, is the original administrator account available or has it been disabledas it should be?

If no one, even normal users are not able to log onto the server, it is likely that the systems SAM database was corrupted at some point. Again, It would be most helpful if we knew what type of NT server we are discussing, but inthis case, a up-to-date NT repair disk would be an invaluable tool because a copy of the SAM database resides on this disk. If there is no disk available, and the SAM database is indeed corrupt, a rebuild is the only way I know of to regain control of your locked server.

Collapse -

nt security

by npressley In reply to nt security

The question was auto-closed by TechRepublic

Collapse -

nt security

by Johnny398430 In reply to nt security

Just a reminder that any other NT user id with domain admin privileges may logon and reset the NT administrator password.

Collapse -

nt security

by npressley In reply to nt security

The question was auto-closed by TechRepublic

Back to Windows Forum
35 total posts (Page 1 of 4)   01 | 02 | 03 | 04   Next

Operating Systems Forums