veayou
asked on
Help! Administrator account has been disabled...
Hi,
My windows 2003 has only one administrator account and now I can not logon even password is correct. It say this account has been disabled.
Please provide some solutions. I don't want to create a new administrator account because I have some encrypted data in this account. But if someone can have any idea to dycrypt without original account, I would appreciated.
Thank you.
BM.
My windows 2003 has only one administrator account and now I can not logon even password is correct. It say this account has been disabled.
Please provide some solutions. I don't want to create a new administrator account because I have some encrypted data in this account. But if someone can have any idea to dycrypt without original account, I would appreciated.
Thank you.
BM.
Doing what What90 suggests will probably not allow you to access your encrypted files anymore. Unless certificates are used, I believe that passwords are used in the builtin encryption system. You can try using the boot CD to unlock the account ONLY, but I wouldn't reset the password. Sorry I don't have a better solution.
ASKER
The partition of this Win2003 I was backup by norton ghost 2003.
So I decide to restore it on another harddisk (laptop) and try to access the encrypted files but still deny. why? I think everything is the same Account, password, OS,... or because of different harddisk?
BM.
So I decide to restore it on another harddisk (laptop) and try to access the encrypted files but still deny. why? I think everything is the same Account, password, OS,... or because of different harddisk?
BM.
Were you able to logon to the laptop or did it say that your account was disabled?
You've got two problems:
1) If your installation was in an Active Directory domain -- and your machine was a DC, tools like the password whacker (above) are not useful. They only address local accounts - not domain accounts.
2) If your encrypted files were encrypted using a domain SID -- you'll need to make that context available to de-crypt the files.
i.e. "Scott" is a great username, but "Scott" from Domain "A" and "Scott" From Domain "B" are different things.
Focus on the SID.
-- Scott.
1) If your installation was in an Active Directory domain -- and your machine was a DC, tools like the password whacker (above) are not useful. They only address local accounts - not domain accounts.
2) If your encrypted files were encrypted using a domain SID -- you'll need to make that context available to de-crypt the files.
i.e. "Scott" is a great username, but "Scott" from Domain "A" and "Scott" From Domain "B" are different things.
Focus on the SID.
-- Scott.
No problem...
Use Bart's PE CD to boot your system and then run Password Renew to either change the admin password, create a new admin, or to upgrade the current user to admin.
I have been using this thing on WinXP machines for a while now... but hadn't done so on a server... well, I just tested this and am responding to you from a testing Windows 2003 server I have, which I am running off this CD and an upgraded account.
Get Bart's PE at: http://www.nu2.nu/pebuilder/ and you'll be resolved within an hour or so.
Good Luck!
Jeff @
TechSoEasy
Use Bart's PE CD to boot your system and then run Password Renew to either change the admin password, create a new admin, or to upgrade the current user to admin.
I have been using this thing on WinXP machines for a while now... but hadn't done so on a server... well, I just tested this and am responding to you from a testing Windows 2003 server I have, which I am running off this CD and an upgraded account.
Get Bart's PE at: http://www.nu2.nu/pebuilder/ and you'll be resolved within an hour or so.
Good Luck!
Jeff @
TechSoEasy
Jeff-
Did you try encrypting a file first using the built-in Windows encryption system, the use Barts software to change the password, then login to see if you could decrypt the files again? I was under the assumption that changing a password in this way would ruin and encrypted files and I'd like to know if I'm wrong.
The idea of promoting some one to an admin role seems like a great option, because it would allow you to log in and enable to other admin account.
Did you try encrypting a file first using the built-in Windows encryption system, the use Barts software to change the password, then login to see if you could decrypt the files again? I was under the assumption that changing a password in this way would ruin and encrypted files and I'd like to know if I'm wrong.
The idea of promoting some one to an admin role seems like a great option, because it would allow you to log in and enable to other admin account.
Dan,
You're right that changing the admin password when you aren't the admin can cause you to not be able to access encrypted files. But you can either promote someone to admin or just create a new user that is in the Domain Admins group. You've got nothing to lose by booting up with Bart's and seeing what you can see... there are a ton of utilities that you can put on that CD, select a number of the pre-grouped packages and you'll have a tool that you'll never be without again.
Actually, I may have built my CD off the site where Password Renew is... http://www.bootcd.us/BartPE_Plugin_Details/384/Windows-Password-Renew-1_0-RC2.html
That site has a "bootable CD wizard" which will make it much easier to build your CD.
You may have to use something like Sam Inside (plugin also on that site) to crack the admin password, but I haven't had to do that in a long time.. the last time I used Sam Inside (booting off a Knoppix CD) it took about 90 minutes to do.
Jeff
You're right that changing the admin password when you aren't the admin can cause you to not be able to access encrypted files. But you can either promote someone to admin or just create a new user that is in the Domain Admins group. You've got nothing to lose by booting up with Bart's and seeing what you can see... there are a ton of utilities that you can put on that CD, select a number of the pre-grouped packages and you'll have a tool that you'll never be without again.
Actually, I may have built my CD off the site where Password Renew is... http://www.bootcd.us/BartPE_Plugin_Details/384/Windows-Password-Renew-1_0-RC2.html
That site has a "bootable CD wizard" which will make it much easier to build your CD.
You may have to use something like Sam Inside (plugin also on that site) to crack the admin password, but I haven't had to do that in a long time.. the last time I used Sam Inside (booting off a Knoppix CD) it took about 90 minutes to do.
Jeff
ASKER
Hi,
Untill now I can not solve this problem. Follow What90 give is unable because I can only reset password or unlock the account but the encrypted data is still not readable.
I tried to use BartPE but I can not find the tool to create new account and put it to administrators group so that I can use this account to unlock the administrator account.
Please provide instruction how to do this...for example Click Go -> Program -> ...
Thank you.
BM.
Untill now I can not solve this problem. Follow What90 give is unable because I can only reset password or unlock the account but the encrypted data is still not readable.
I tried to use BartPE but I can not find the tool to create new account and put it to administrators group so that I can use this account to unlock the administrator account.
Please provide instruction how to do this...for example Click Go -> Program -> ...
Thank you.
BM.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
P. S. If it was there, it'd be under Go > Programs > Recovery Tools
ASKER
Hi,
THE PROBLEM IS NOW SOLVED!
What's a great powerful tool. With BartPE my problem is now solve I can enable my admin account by promote user account to administrators group very easily. Thank to TechSoEasy. I really can't have word to say to you TechSoEasy. I thought my file would lost with this problem but now I can login again and decrypted all file already. :-) to prevent it happen later. Once again, Thank you very much TechSoEasy. Because I don't have much enough points so a little 300 points will give to you for helping me this. It would be 10x of this point so that equal to this solution.
Thank you,
Bm.
THE PROBLEM IS NOW SOLVED!
What's a great powerful tool. With BartPE my problem is now solve I can enable my admin account by promote user account to administrators group very easily. Thank to TechSoEasy. I really can't have word to say to you TechSoEasy. I thought my file would lost with this problem but now I can login again and decrypted all file already. :-) to prevent it happen later. Once again, Thank you very much TechSoEasy. Because I don't have much enough points so a little 300 points will give to you for helping me this. It would be 10x of this point so that equal to this solution.
Thank you,
Bm.
Terrific! Glad to be of help.
Use this tool to reset the admin password and unlock the account http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html