Need a way to reset admin password under AD Win 2003 R2

[slodave]

I was at a clients today and could not access their Windows 2003 Server R2. They even called the other company up and confirmed the password. I have read that it is next to impossible to reset a password under Active Domain. The utilities I have don't work for 2003 servers. I have compiled a util CD called BartPE and added a plugin that claims to be able to change the password for 2003 R2, but won't be able to try until tomorrow. I know that there is also a way to change some critical windows files - such as winlogon.exe and a couple of others and trick server into loading, but not starting A.D., but I am hesitant to try this, for fear of killing the server outright.

Any sysadmins that know a sure-fire way of getting access to Windows server 2003 R2 - without paying a huge sum o $$$$?

Thanks! BTW, I need the answer by 12:00 p.m. tomorrow, the 4th.

Dave

[Halm]

Log on as any Domain Admin account and reset? Surely there is a backdoor???

[id10t]

If it is a local machine account, you can use

http://home.eunet.no/pnordahl/ntpasswd/

Lastest Ubuntu CD (7.10) can read/write NTFS no problems, if you think you can do it by just editing/removing/renaming files...

[robs944]

You said you can't access the server, is this a local admin account or a domain admin account?

If domain you can give this a try
http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003 _ad.htm

If local than id10t suggestion should work.

Like Halm said there should be a backdoor, another admin account should have been created. Do they have any documentation on the members of domain groups, enterprise admins, domain admins, etc? Also if they have a tape backup account it may have admin rights as well.

Of course before I tried anything I would make sure they have a recent backup.

good luck and let us know how it goes.

[Scott R]

Sounds like this is possibly a domain controller for "active directory?" If so there is a way to do it for free. Obviously if it's a DC it has no local accounts to recover, but there is a method for getting in. Let me know.

[HardDrive]

More info needed.

Are you trying to access a domain account or a local admin account?

[slodave]

I believe I am trying to access a domain account. It is a single server that seems to be acting as a DC and using AD. The is no documentation available. I really have no other info I can give at the moment.

Dave

[Scott R]

Originally Posted by slodave

I believe I am trying to access a domain account. It is a single server that seems to be acting as a DC and using AD. The is no documentation available. I really have no other info I can give at the moment.

Dave

I've used this a few times, always a success. Why people have single DC's in their environment boggles my mind.

http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003 _ad.htm

[slodave]

Originally Posted by Scott R

I've used this a few times, always a success. Why people have single DC's in their environment boggles my mind.

http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003 _ad.htm

This is my last resort. I have one other thing to try first. I'll be at the server in about half an hour.


Dave

[slodave]

Password reset. I ended up using the method Scott R attached. I had bookmarked that site yesterday as well.

Next issue. Powerchute Business Edition is installed and I have now user/pass info for it either. Anybody know how to reset it? Not having much luck finding the answer online.

Dave