Re: Changing Administrator Password On Server 2003 Domain Controll

Hi,

Yes, new password will work on all the domain joined computers since this is
same account no matter where you logon.

Note: you should limit use of Administrator account for logging into domain
controller servers and only when you can not do it with your administrative
account.

--
Mike
Microsoft MVP - Windows Security

"GLT1973A" <GLT1973A@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:616B2C7C-DC21-4C75-A3AA-B3F3FE7709BE@xxxxxxxxxxxxxxxx
Thank you Mike!

It is in fact the Domain Administrator password I am speaking of. In other
words, if I change the Administrator password on DC One and only on DC
One,
the same password will then be required on DC Two and the Member Servers
(in
that Domain) to log in as Administrator, correct?

Thank you again. It is indeed very much appreciated!

"Miha Pihler [MVP]" wrote:

Hi,

If you are talking about domain administrator password -- yes it is same
on
all the systems. If you are talking about other passwords e.g.

- local administrator password, they are different on every computer.
Note:
domain controllers don't have local users or groups -- so you don't have
to
worry about that.
- on domain controllers there is DSRM (Directory Services Restore Mode)
password that you use for restoring active directory and other operations
in
DSRM mode. Each domain controller _can_ have unique DSRM password.

Here is how you can change DSRM password:

How To Reset the Directory Services Restore Mode Administrator Account
Password in Windows Server 2003
http://support.microsoft.com/kb/322672

--
Mike
Microsoft MVP - Windows Security

"GLT1973A" <GLT1973A@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D06B8173-A56D-4D85-968C-E0A736641E09@xxxxxxxxxxxxxxxx
We have two Server 2003 DC's and many Server 2003 and Server 2000
Member
Servers. It has been ages since the password at the DC was changed, and
for
the life of me I cannot recall the following: If I change the
Administrator
Password at ONE Server 2003 Domain Controller, will this same password
be
valid for login at the other DC AS WELL AS the other Member Servers? I
apologize for the stupidity of this question, but so help me I just
cannot
recall!





.

Relevant Pages

  • Re: SMS 2003 - adding Secondary site... driving me -mental- :-/
    ... Domain controllers DO have local groups, they just work a little differently ... on DCs than they do on member servers and workstations. ... There is a section of procedures for SMS Account Management near the end. ...
    (microsoft.public.sms.setup)
  • Re: Access and roles in DCOM technology
    ... account should definitely not be. ... The 4 servers interact via DCOM technology. ... If this user is local administrator on 4 servers everything works ... > user so the DCOM technology will work between the servers? ...
    (microsoft.public.security)
  • Re: MS Exchange Relay Authentication
    ... I've seen this on a few servers in various environments. ... The account was still named Administrator ... It seems that account passwords are being cracked. ...
    (NT-Bugtraq)
  • Re: Administrator Account Locking Out
    ... the Administrator account, or possibly our RADIUS server might be using it ... 2003 Servers and Windows 2000 servers. ... I have looked in both the event logs, turned on netlogon logging, etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Super Admin Account
    ... Does he usually go to servers and mess with that? ... Does he have sufficient knowledge to mess with DCs? ... Rename the Administrator account, create a new account ...
    (microsoft.public.windows.server.active_directory)
Loading