How do I change the local ADMIN password on a DC?

[timwescott]

Can anyone tell me how to change/reset the password for the local administrator account on a DC? (W2K SP2)

I know that there are no local groups/accounts displayed on a DC from 'managing' the computer, but when I boot the server into DRS mode it asks for a password, and will not accept the current domain password. I assume that it is asking for the local admin password, which I don't have.

Any help appreicated.
Tim

 

[Tershia]

Open Active Directory Users & Computers right mouse click on the account you want to reset and choose change password

 

[timwescott]

Not for the LOCAL administrator account on a DC, which is only visible if you 'dcpromo' the server out of AD, as the initial text states!!!

 

[Reepicheep]

I believe this password is kept in the SAM (could be wrong). If you reboot in the AD recovery mode the SAM is available under Computer Management. But, of course, that is your problem.

There are a number of password recovery tools from vendors available taht might help:

http://www.sunbelt-software.com/product.cfm?id=265

http://www.lostpassword.com/news/pnl091100.htm

http://www.winternals.com/products/repairandrecovery/locksmith.asp

Also do a Google search on breaking or hacking Windows 2000 passwords and you should find free tools as well - I have one I have used to recover SAM database administrator accounts on NTFS partitions (it had an NTFS driver as well) but I cannot find it - I moved and it is missing). My corporate firewall, alas, keeps me from those sites during the day.

Pax,
Richard