Member Avatar for silvercats

I had to increase the password's number of charaters. Then I put a long and new password (same passord for server and client) to adminsitrator.
now I do not remember the password.help!

I know how to boot and reset the local password. but this is active directory. help???

  • 3 Contributors
  • 7 Replies
  • 218 Views
  • 1 Week Discussion Span
  • Latest Post Latest Post by kalpeshchavda

Dani AI

Generated

Brief practical guidance so future readers don’t hit the same panic: first check the easy, supported routes that hinted at — log in with any other Domain Admin account or use another healthy domain controller to change the built‑in Administrator password. If no other admin account or DC exists, the supported way to recover is to restore AD from a recent system‑state backup (non‑authoritative/authoritative restore and forest‑recovery procedures are documented by Microsoft). Active Directory forest recovery / system‑state restore. (learn.microsoft.com)

If you can get physical access to a writable DC and you only need to reset the Directory Services Restore Mode (DSRM) account (not the domain Administrator), use NTDSUTIL from an elevated prompt on that DC: run ntdsutil, then set dsrm password, then reset password on server <servername> and follow the prompts. This is the Microsoft‑supported method for DSRM password maintenance. Reset the DSRM password (ntdsutil). (learn.microsoft.com)

Do not rely on generic offline password tools as a fix for a DC. Tools bundled in repair ISOs (Hiren, Offline NT Password / chntpw, etc.) are for local SAM accounts and explicitly do not support altering Active Directory domain account data; using unsupported imaging or offline edits against a DC risks USN rollbacks and irreparable replication problems. See the chntpw FAQ and Microsoft’s guidance on USN rollback and unsupported restore methods before attempting anything destructive. (chntpw.com)

Extra cautions: if the DC’s drive is protected by BitLocker, offline boot tools can’t read or modify the disk without the recovery key. If no safe recovery path exists (no backups, no other DC, no recovery key), document the state, rebuild a new DC and, if necessary, rejoin/recreate accounts — and treat any unsupported password hacks as last‑resort, test‑only options. BitLocker overview. (learn.microsoft.com)

Recommended Answers

All 7 Replies

Member Avatar for JorgeM

Do you have another account in the directory that is a member of the Adminstrator's group you can use to log in and change this Administrator account password?

Member Avatar for silvercats

no I put the same pswd to all admins. but have limited active directory password no use eh? don't tell me I have to format everything please

Member Avatar for JorgeM

If you do a search on the web for "recover domain admin password", you'll find a few methods/tools you can use/download to reset the admin password. You should note that none of them are supported by Microsoft so you are on your own.

If this is a production system, I would caution you. However, if this is a test system, give it a try. I have used some of these methods before and they work. There are just no guarantees that you wont blow up Active Directory in the process.

Member Avatar for JorgeM

To change te admin password, it would be done on the domain controller. I have not used that resource in the past.

Member Avatar for silvercats

ok did it and worked. thanks for the help

Member Avatar for JorgeM

Glad to hear you resolved this.

Member Avatar for kalpeshchavda

hiren boot cd

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.