Major Problem Help MLA can't login now 3

[cgullett]

Here it goes. I work in a big shop and the password for the administrator account on our cm, has made it around to people in that don't need to know. I went into the cm today to try and restrict users, set up accounts (we only have one right now) I made the mistake of turning MLA on and now i have blocked the access of the administrator account. Can some one please shed some light on me. Is there away to get around this or not. When i enabled mla i typed in the password, but when i try to login to ccmadmin i don't have all the rights. Please help, i have about a day to fix this before my supervision finds out and than i am sol. someone plese help.
thanks

 

[IPTnewbie]

r u using

use "ccmadministrator"
password"xxxxxxx

 

[cgullett]

Yes i tried both administrator and ccmadministrator, still no luck.

 

[whykap]

Did you try restarting IIS and WW services on the pub?

 

[cgullett]

No i have not, could you please explain what the IIS sevice is?

 

[whykap]

On the call manager publisher server go to:
start->programs->administrative tools->services

Select

http://www service

and select restart
Do the same for IIS

 

[Dtravler]

!!! I'm not 100% on this sulution !!!

Ga to Start > Run > cmd >
Enter CCMPWDChanger
Now you are able te (re)set the passwords of the CCM, CCM Extended functions, Cisco Tomcat and Extension Mobility services.
When this tool is finished restart Cisco Extended functions, Cisco IPMA and Extension Mobility services.

 

[IPTnewbie]

it definately pulls up some sort of app to change this password but it become "not responding" on my ccm when i went to open the app.

 

[IPTnewbie]

i tried it again this time it came up.

must this be done on the pub and sub in a cluster on just the pub

 

[Dtravler]

Good question.
If you changed the password you might need to do the same on the Sub. But I suppose you don't need that. The only thing the pub and sub share is the SQL database and password.

By the way. On the sub's we disable the IIS and webservices for a security perspective.

 

[cgullett]

I am headed to work to try everything right now. Thank you guys for everything so far.

 

[cgullett]

I restarted the ISS and Web services, and IT WORKED. Thank you guys so much. You really saved my a$$. One more questions, how do you disable the web services on the subscriber. I think that is where my problem orginated from. Our subscriber is in a different building and other another shop has access to it. I want to cut them off completely. Thanks

 

[Dtravler]

In the Windows Control Panel go to Services.
Go to 'World Wide Web Publishing Service' and set startup type to Disabled and stop the service.
If you need to run CCMAdmin on the sub, you can manually enable the service again and do your thing. But once your cluster is configured, there is no need to do that actually.

 

[whykap]

If the others in another shop have access to the subscriber that means they have access to the publisher also.
Disabling

http://www services

won't really solve your problem.
Securing your servers however will.

MLA is one step towards that.

 

[IPTnewbie]

i gave you a star DT

 

[Dtravler]

Thank you. Hope it will be helpful for others to.