RE: Question regarding admin passwords on sbs.



Hello,
Besides Edward's excellent post,
There are cracking apps which given enough time will recover your
password(s) like Lopht.

I'd also ask you to reconsider disabling the Administrator account, either
you misunderstood the recommendation or you received bad advice. Best
Practices should be to configure the Administrator's account with an
<extremely> strong password, then never use it except in a real emergency (it
should be your backdoor, not your Waterloo). Never disabled. Then, as you
describe create another account with Domain Admin privileges for your regular
use.

--
Tony Su
www.su-networking.com
ISA
SBS
Enterprise Mobile Solutions Architect


"Edward Tian" wrote:

> Hi:
> Thank you for posting here.
>
> From the description, I understand that you have disable the default admin
> account and create a new user with admin permission. You forgot the admin
> password so that the SBS Server is inaccessible currently. If I am off
> base, please do let me know.
>
> The SBS security model is based on the Microsoft Windows Server security
> model. This security model requires a user name and password before access
> to the computer is granted. Even Microsoft has no solution to *Crack* the
> Active Directory password. This is for your system security.
>
> Generally, the administrator password is lost, forgotten, or unknown, the
> operating system needs to be reinstalled, if there is no backup. If there
> are no other users with administrative access, there is no way to recover
> the password. In other words, the only solution is to reinstall the system.
>
> Based on my experience, you could use the following third-party utility to
> reset the domain admin password.
>
> http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003_ad
> .htm
>
> I would like to kindly clarify that: This response contains references to
> third party World Wide Web sites. Microsoft is providing this information
> as a convenience to you. Microsoft does not control these sites and has not
> tested any software or information found on these sites; therefore,
> Microsoft cannot make any representations regarding the quality, safety, or
> suitability of any software or information found there. There are inherent
> dangers in the use of any software found on the Internet, and Microsoft
> cautions you to make sure that you completely understand the risk before
> retrieving any software from the Internet.
>
> Thanks for your understanding. Have a nice day!
>
> Best Regards
> Edward Tian(MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> | Date: Wed, 30 Nov 2005 18:02:14 -0600
> | Subject: Question regarding admin passwords on sbs.
> | From: Spamaway <spam.of.pert--->gmail.com>
> | Content-Type: text/plain; format=flowed; delsp=yes; charset=iso-8859-15
> | MIME-Version: 1.0
> | Content-Transfer-Encoding: 8bit
> | Message-ID: <op.s02vp0vqhq7s4x@xxxxxxxxxxxxxxxxxxxx>
> | User-Agent: Opera M2/8.50 (Win32, build 7700)
> | Newsgroups: microsoft.public.windows.server.sbs
> | NNTP-Posting-Host: external.genaco.com 64.247.230.158
> | Lines: 1
> | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
> | Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:226816
> | X-Tomcat-NG: microsoft.public.windows.server.sbs
> |
> | I've been experimenting with a SBS 2003, and find myself now in a
> quandry.
> | As per best practices, I created an user account and gave this user
> | account admin (enterprise, local, domain. etc) rights. As per best
> | practices, I disabled the default Administrator account. No other user
> | accounts have admin access. Non-admin users cannot login the sbs server
> | interactively. As you might have guessed, I have forgotten the password
> to
> | the account of the user with admin rights. Resetting the Administrators
> | password would not help because the account is disabled.
> |
> | Is there a way of accessing the server with admin rights without having
> to
> | reinstall the whole OS?
> | Is there a way to reset the password to the user with admin rights?
> |
> | Any help would be greatly appreciated!
> |
>
>
.



Relevant Pages

  • RE: Multiple Log In Attemps on SBiz DC
    ... Please try a clean boot to have check. ... Hide All Microsoft Services and Disable All third party Services, ... disabling All Microsoft Services. ... <Please find attached the security log files -the problematic account is ...
    (microsoft.public.windows.server.sbs)
  • RE: Question regarding admin passwords on sbs.
    ... account and create a new user with admin permission. ... The SBS security model is based on the Microsoft Windows Server security ...
    (microsoft.public.windows.server.sbs)
  • RE: I created a user and I cant log on as that user
    ... You see Admin on the Change Logon Password tab because you are logged on as ... Give the Admin account a password. ... Select the menu option Tools> Security> User and Group Accounts ... Microsoft Access Support ...
    (microsoft.public.access.security)
  • RE: Vista Hell
    ... You mentioned 'Only way is to log in as admin'. ... Which admin account do you refer to? ... Log on a Vista client as a Domain Admin to run gpmc.msc to edit Small ... Microsoft Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: A problem regarding admin rights and passwords.
    ... account and create a new user with admin permission. ... The SBS security model is based on the Microsoft Windows Server security ... A problem regarding admin rights and passwords. ...
    (microsoft.public.windows.server.sbs)