-
May 25th, 2001, 08:46 AM
#1
Windows 2000 Server Password Lost
Is there a way to recover a windows 2K server password for the admin account, I know Win NT 4.0 server could be recovered. One of my customers employees quit and changed the Password to the server, and there screwed. It's an NTFS partition.
-
May 25th, 2001, 10:42 AM
#2
-
May 25th, 2001, 11:26 AM
#3
I donīt know how to solve your problem, but this is a tip so the next time you really know who was.
>>>>>>>
Who changed the @!#* administrator's password?
To determine the UserName that changed the Administrator password, perform the following on the PDC:
1. Enable Success and Failure audits for File and Object Access using
User Manager for Domains / Policies / Audit.
2. Using Regedt32, select the SAM key in HKEY_LOCAL_MACHINE and use Security / Permissions
to set Full Control for the Administrators local group. Check Change Permissions on Existing Subkeys.
3. Navigate to HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\0 00001F4, select Security / Audit Permissions
and add the Administrators local group to the list. Select this group and enable Success and Failure auditing
for Set Value events on this and all subkeys.
When a change is made to the Administrator account, the event:
ID: 560
Source: Security
Type: Success Audit
Category: Object Access
will indicate the UserName.
-
May 25th, 2001, 11:35 AM
#4
are there any other accounts with admin rights? Log in under one of those and change it
-
May 25th, 2001, 03:28 PM
#5
You can also join a domain, then log in as the domain administrator. You should be able to change the local administrators password from a domain controller using a domain admin or enterprise admin account. If you have access to a domain, add this server machine to the domain ACL.
Community standards do not maintain themselves: They're
maintained by people actively applying them, visibly, in public. - Eric Raymond
-
May 25th, 2001, 03:34 PM
#6
This may be a long shot, but if you have a recovery disk, do a system recovery and the original password will be restored. Past that, ya gonna need a cracka'!
-
May 25th, 2001, 08:48 PM
#7
The guy changed the Administrator Account password. The only other account on it are basic users (no rights) and a guest account which is disabled ( I dont know why he disabled it).
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Bookmarks