General discussion


Changing Administrator Password

By johncutt ·
I am 1 of 2 people who are the IT dept for a small network of about 60 users. We have recently discovered that one of the users has found out the administrator password for the domain, so we really need to change it.

I was wondering if anyone could let me know exactly what is involved, and whether we need to go through and change the password on all of the services running on the servers individually, of whether they change automatically.

We have NT, 2000, and 2003 servers.

If anyone can help I would be very grateful.

Thanks :)

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by Gigelul In reply to Changing Administrator Pa ...

Not a very easy questions and also no details about you network.
Because this can be a very long discussion I suggest you to change the password and then see what happend.
Put a very strong password for the main domain admin account and create a second domain admin account for general working.
Generaly the users will not be affected!?! (I hope that you are lucky)
You will use the main domain admin account for services and any other critical tasks on your servers.
Never use the main admin account to login on workstations or in presence of other user.

Collapse -

by curlergirl In reply to Changing Administrator Pa ...

Yes, you do need to check the services running on each of the servers to see if any of them are running under the security context of the Administrator account. Services that are installed by the operating system, such as the browser, server, workstation, etc., etc., are always installed under the LocalSystem context, so you don't have to worry about them, unless you think someone might have changed this. But when you install 3rd party programs such as antivirus and backup software, very often the installation routine will allow you to set a specific account to act as the service account. Someone may have used the Administrator account for one or more of these programs, so you need to check. Once you've identified those services, if any, you can go ahead and change the Administrator password, and then go to each machine's Services management console and re-enter the password for the service logon account where Administrator is being used.

Hope this helps!

Related Discussions

Related Forums