Windows Forum

Ask something
Discussion Locked

Changing Domain Admin Password

0 helpful
3 replies

by xpertdragon 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hey all,

Quick qustion, that is most likely obvious to those that have done this. I am looking for online documentation, not tips, an actual print out, that can step me through changing a Domain Admin password that would affect 1 PDC, and 3 BDC across 3 LANs, communicating through a VPN Network connection.

Where can I find the best documented and painless way to change this all important password, that I know will affect all MAJOR NT SERVICES, and soem user services across the entire domain.

Please help.

Thank you.

Paul M. Chavez

3 replies

by timwalsh

There is only one way to change the domain administrator password and that is by using the User Manager for Domains. The PDC has the only writable copy of the SAM database in the domain so the change must take place on the PDC. The BDCs will receive the change the next time the domain is synchronized, either on a schedule, or if you force synchronization.

As for other services/applications that rely on the administrator account, the answer is it depends. If the service/application relies on NTs SAM database toatally for authentication purposes (the case with all native services), nothing else need be done as long as all BDCs are synchronized with the PDC. If you must enter an administrator account ID and password in the application during program configuration (as with many backup packages), then you must go to each of these applications and physically change the credentials so that they match the SAM database.

Hope this helps.

by xpertdragon

Thanks for your help. There was only 1 odd end service that needed to be manually changed with password requirements. Thanks again.

This discussion is closed to new replies.