Windows Server 2003 – How To change Domain Admin password
Posted by aidas | Posted in Active directory, Security, Windows 2003 | Posted on 27-07-2010
0
Hello there!
To change domain admin password under windows server 2003 AD You will need:
* physical access to domain controller
* directory restore administrator password
* SRVANY and INSTSRV resource kit tools provided by Microsoft
1.
Restar Your Windows server 2003 domain controller into Directory Restore service mode (mode available in list after hitting F8 when booting PC)
Login as Administrator (using directory restore administrators password)
2.
Copy SRVANY and INSTSRV tools into temp folder located for example in c:\TMP
Also copy cmd.exe that is located in “%WINDIR%\System32″ to c:\TMP folder
3.
Start command line.
Type: cd c:\TMP and hit Enter
Type: instsrv PassRecovery “c:\TMP\srvany.exe” and hit Enter
4.
Start registry editor and navigate to:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PassRecovery
Create new subkey named Parameters and add following values:
name: Application
type: REG_SZ (string)
value: C:\TMP\cmd.exe
name: AppParameters
type: REG_SZ (string)
value: /k net user administrator [New Password]
Replace [New Password] with complex password You will set for Administrator user.
5.
Open Services (Start>Run>services.msc>OK)
Click on PassRecovery service and change starting type to Automatic
Then go to “Log on” tab and check “Allow service to interact with desktop” option
6.
Restart server in normal mode and wait for command prompt to show up.
Log on as Administrator with new password [New Password]
7.
To uninstall service You created open command line and type:
net stop PassRecovery and hit Enter
sc delete PassRecovery and hit Enter













