General discussion

Locked

Reset Domain Admin Password

By lanemcmullen ·
I have a Windows 2000 Server, that is a domain controller using AD, where I renamed the administrator account and changed the password on the account. For months the account worked without problems, until a power-outage occured. Now, I am not able to log into the server with my password. How can I reset the domain adminstrator password, even if it has been renamed without having to spend a lot of money? I have tried the Linux boot disk, but that is only for local accounts. Thoughts?

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Reset Domain Admin Password

by Joseph Moore In reply to Reset Domain Admin Passwo ...

The first suggestion is are there any other Administrator-level accounts you can use to log onto the server? If so, then you could use one of these accounts to log in, and then open AD Users & Computers, and change the Admin password.

But I will take it that if you have already used the Linux boot floppy, then another Admin account is not available.

Ok, then, how about the LOGON.SCR hack?

IF you do have an account that can log in locally to the server, then you can try this. Log into the server. Open My Computer and go to C:\WINNT.
Make a copy of LOGON.SCR and just call it "Copy of LOGON.SCR"
Make a copy of CMD.EXE and call it "Copy of CMD.EXE"

Ok, here is where the fun begins....

Collapse -

Reset Domain Admin Password

by Joseph Moore In reply to Reset Domain Admin Passwo ...

DELETE the original LOGON.SCR and then RENAME your "Copy of CMD.EXE" to be LOGON.SCR

Then, log out of the server and don't log back in. Let it sit for 15 minutes, so you are just looking at the Press CTRL+ALT+DEL window.

After 15 minutes, the default screen saver will kick in. Normally, you would just see the CTRL+ALT+DEL window bouncing merrily around the screen. Instead, you will see a Command Prompt open.

You can then manually run AD USers & Computers, and it will open. Plus, it will open with System rights, which are Full Control rights.

Change the Administrator account at this time, then close AD Users & Computers.
Close the Command Prompt.

Log in then as Administrator with your new password.

:-)

Don't forget toreplace LOGON.SCR with the backup copy you made after everything is working.

hope this helps

Collapse -

Reset Domain Admin Password

by Joseph Moore In reply to Reset Domain Admin Passwo ...

Note: I have never tried this on a 2000 Domain Controller. I have done it on NT4 PDC, and Win2KPRo machines. It is a great little trick.

Also, if you can't log into the server locally, but if you can hit the WINNT folder on it over your network (like through a shared WINNT folder or shared out C drive), that will work also.

Good luck.

Collapse -

Reset Domain Admin Password

by sgt_shultz In reply to Reset Domain Admin Passwo ...

wow. (retching and gagging noises). cool trick. no security without physical security...thanks for sharing that...

Collapse -

Reset Domain Admin Password

by sgt_shultz In reply to Reset Domain Admin Passwo ...

wow. (retching and gagging noises). cool trick. no security without physical security...thanks for sharing that Joesph...

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums