Change Domain Administrator Password 1

[deisehun]

I have a Windows 2000 Domain. I need to reset the Domain Administrators password.

I know to check Services, Scheduled tasks, Backups etc that may authenticate with the old password.

There is a Batch file that moved pdf's after they've been converted from one location to another, this has the current password in there.

How can I change the password and ensure that there is instant replication across the Network - i.e I change the password at 9am and change the password in the batch file and other places too - will I have downtime? Will I need to reboot to synchronise the change?

Anything else?

Thanks..

 

[porkchopexpress]

That depends on the size of your network if it's all on one site the password should be changed in seconds on all DC's. If the batch file is just in that one location and doesn't run every minute it should be fine.

I would consider creating another account with a very good password (should still be changed periodically) for services rather than using the administrator password.

 

[deisehun]

There are two DC's and about 14 Servers all in one location.

So theres no need to involve Group policy or run any commands to update the password?

Just Change it from Ctrl + ALt + delete?

I'll create an account for the batch file - sounds like a much better idea.

Thanks

 

[porkchopexpress]

Logoff the admin on one DC and change it from the other the new password will replicate to the second DC. If you have any problems which you shouldn't you can always change it back but it's just the same as changing any other password.

 

[deisehun]

Thanks - one final bit of clarification.

I log off DC1, change the password via Ctrl + alt + delete

Log onto DC2 with the new password.

Password changed & replicated?

 

[porkchopexpress]

You can change the password while you are logged in using control alt delete.

 

[deisehun]

Thanks again.

 

[libroos]

In addition, are there any tools, softwares to change the password of the local administrator passwords as well as the scheduled tasks, services?

 

[markdmac]

No tools to automate the change of passwords on services or scheduled jobs that I am aware of.

You mention changing the LOCAL admin password on the servers. The DCs do not have a local account, only the domain account and that password will replicate immediately.

If you are looking to change the LOCAL ADMIN password on multiple server or workstations you can automate that process using VBScript. I typically do this to change the local admin password on a large list of servers and workstations on a periodic basis, particularly when an Admin or desktop support person leaves a company.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[libroos]

Thanks Mark. Where can I find the vb script?

 

[porkchopexpress]

Here is a link to Marks FAQ faq329-6378

You can also use Pspassword

http://www.microsoft.com/technet/sysinternals/utilities/pspasswd.mspx

 

[ClarkPeterson]

Yes, it's possible to automate this. For example we use Desktop Authority from Scriptlogic to automate changes for administrative password. When we need to change authentication options or permissions batched, we use Security Explorer, create a template and push the changes on remote computers.