RE: Question regarding admin passwords on sbs.



Hi Tony, thanks for your sharing! :)

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Question regarding admin passwords on sbs.
| thread-index: AcX2OGqNES8nKA5VTKW/ZNoHKyQNBA==
| X-WBNR-Posting-Host: 70.0.29.193
| From: "=?Utf-8?B?VG9ueSBTdQ==?=" <TonySu@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <op.s02vp0vqhq7s4x@xxxxxxxxxxxxxxxxxxxx>
<5O0k6Ei9FHA.4000@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Question regarding admin passwords on sbs.
| Date: Wed, 30 Nov 2005 21:31:01 -0800
| Lines: 125
| Message-ID: <9A9ABD4F-1E42-48DE-8DFF-65ED5DC1B400@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:226884
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello,
| Besides Edward's excellent post,
| There are cracking apps which given enough time will recover your
| password(s) like Lopht.
|
| I'd also ask you to reconsider disabling the Administrator account,
either
| you misunderstood the recommendation or you received bad advice. Best
| Practices should be to configure the Administrator's account with an
| <extremely> strong password, then never use it except in a real emergency
(it
| should be your backdoor, not your Waterloo). Never disabled. Then, as you
| describe create another account with Domain Admin privileges for your
regular
| use.
|
| --
| Tony Su
| www.su-networking.com
| ISA
| SBS
| Enterprise Mobile Solutions Architect
|
|
| "Edward Tian" wrote:
|
| > Hi:
| > Thank you for posting here.
| >
| > From the description, I understand that you have disable the default
admin
| > account and create a new user with admin permission. You forgot the
admin
| > password so that the SBS Server is inaccessible currently. If I am off
| > base, please do let me know.
| >
| > The SBS security model is based on the Microsoft Windows Server
security
| > model. This security model requires a user name and password before
access
| > to the computer is granted. Even Microsoft has no solution to *Crack*
the
| > Active Directory password. This is for your system security.
| >
| > Generally, the administrator password is lost, forgotten, or unknown,
the
| > operating system needs to be reinstalled, if there is no backup. If
there
| > are no other users with administrative access, there is no way to
recover
| > the password. In other words, the only solution is to reinstall the
system.
| >
| > Based on my experience, you could use the following third-party utility
to
| > reset the domain admin password.
| >
| >
http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003_ad
| > .htm
| >
| > I would like to kindly clarify that: This response contains references
to
| > third party World Wide Web sites. Microsoft is providing this
information
| > as a convenience to you. Microsoft does not control these sites and has
not
| > tested any software or information found on these sites; therefore,
| > Microsoft cannot make any representations regarding the quality,
safety, or
| > suitability of any software or information found there. There are
inherent
| > dangers in the use of any software found on the Internet, and Microsoft
| > cautions you to make sure that you completely understand the risk
before
| > retrieving any software from the Internet.
| >
| > Thanks for your understanding. Have a nice day!
| >
| > Best Regards
| > Edward Tian(MSFT)
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Date: Wed, 30 Nov 2005 18:02:14 -0600
| > | Subject: Question regarding admin passwords on sbs.
| > | From: Spamaway <spam.of.pert--->gmail.com>
| > | Content-Type: text/plain; format=flowed; delsp=yes;
charset=iso-8859-15
| > | MIME-Version: 1.0
| > | Content-Transfer-Encoding: 8bit
| > | Message-ID: <op.s02vp0vqhq7s4x@xxxxxxxxxxxxxxxxxxxx>
| > | User-Agent: Opera M2/8.50 (Win32, build 7700)
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: external.genaco.com 64.247.230.158
| > | Lines: 1
| > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| > | Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:226816
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | I've been experimenting with a SBS 2003, and find myself now in a
| > quandry.
| > | As per best practices, I created an user account and gave this user
| > | account admin (enterprise, local, domain. etc) rights. As per best
| > | practices, I disabled the default Administrator account. No other
user
| > | accounts have admin access. Non-admin users cannot login the sbs
server
| > | interactively. As you might have guessed, I have forgotten the
password
| > to
| > | the account of the user with admin rights. Resetting the
Administrators
| > | password would not help because the account is disabled.
| > |
| > | Is there a way of accessing the server with admin rights without
having
| > to
| > | reinstall the whole OS?
| > | Is there a way to reset the password to the user with admin rights?
| > |
| > | Any help would be greatly appreciated!
| > |
| >
| >
|

.



Relevant Pages

  • Re: Problem with connect computer wizard
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please double-check the default application pool in IIS. ...
    (microsoft.public.windows.server.sbs)
  • RE: Fax monitor incoming + outgoing calls?
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... When opening a new thread via the web interface, we recommend you check the ...
    (microsoft.public.windows.server.sbs)
  • Re: pop & smtp
    ... Please change the users apply to the SBS Internet Access rule ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please help me collect ISA info and firewall log for analyze. ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS and email problem
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... our remote outgoing mail server as discussed, Comcast ...
    (microsoft.public.windows.server.sbs)
  • RE: fax not sending
    ... Thanks for updates. ... it did not relate to any problem on your fax or SBS side. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)