subject: Forgot the Administrator's Password? - Change Domain Admin Password in Windows Server 2003 AD [print this page] Forgot the Administrator's Password? - Change Domain Admin Password in Windows Server 2003 AD
So you forgot the Administrator's Password of your Windows 2003 and trying hard to remember what it could be, but no use! You are not able to remember it. Do not worry; let me find you a way to overcome this problem. For this, you should have local access to the Domain Controller (DC), local Administrator password and two tools provided by Microsoft in their Resource Kit: SRVANY and INSTSRV. You need to download them from Microsoft website.
Restart Windows 2003 in Directory Service Restore Mode by pressing F8 and choosing Directory Service Restore Mode. It will disable Active Directory. Log on as Local Administrator. You now have full access to the computer resources, but you will not be able to make any changes to Active Directory.
Now install SRVANY. It will have full access on the system and can virtually run any program as a service. You need to configure SRVANY to start the command prompt so that it can run the net user command.
Copy SRVANY, INSTSRV and cmd.exe to a temporary folder. You will usually find cmd.exe in %WINDIR%System32.
Start a command prompt, point to the temporary folder and type:
instsrv passrecovery temp folder namesrvany.exe
Now configure SRVANY. For this, you need to create a new subkey called Parameters and add two new values. Click on Start>>Run.. Type Regedit in the box and navigate to
HKEY_ LOCAL_ MACHINESystemCurrent Control SetServicesPassRecovery.
Type the following:
Name: Application
Type: REG_SZ(string)
Value: temp foldercmd.exe
Name: AppParameters
Type: REG_SZ(string)
Value: /k net user administrator 123456/domain
You need to replace 123456 with the password you want. If you have not changed the default domain policy, you have to use a complex password.
Now go to Start>>Settings>>Control Panel>> Administrative Tools>>Services and open the PassRecovery property tab. See that the startup mode is set to Automatic. From the Log On tab enable the option Allow service to interact with the desktop.
When you restart Windows normally, SRVANY will run the NET USER command and reset the domain admin password.
Now log on with the Administrator's account and the password you've set and uninstall SRVANY Using this command prompt. Type
Net stop PassRecovery
Sc delete PassRecovery
Delete the temporary folder and voila! Your problem is solved.
For more information on this topic, please visit http://www.recoveryknowledgebase.com/Windows-Server-Password-Reset.htm
