Solved

Domain Controller password

Posted on 2009-04-01
6
237 Views
Last Modified: 2012-05-06
Hi, we have 2 domain controllers. We reset the password about a month ago, however everyweek it keeps on going back to the previously set password. I know that no one is doing it manually. Where can i check to see who, how or where it changed
0
Comment
Question by:quippee
  • 3
  • 2
6 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 500 total points
ID: 24038866
I can't think of anything that would cause this - apart form someone chnaging it manually - set up auditing of account control.
0
 
LVL 16

Expert Comment

by:speshalyst
ID: 24038871
are you referring to the DOmain ADMIN password ?
do you have password history enabled in your domain.. that would be a good thing to have..
http://thelazyadmin.com/blogs/thelazyadmin/archive/2005/03/22/Windows-2000-and-2003-Password-Complexity.aspx
 
0
 
LVL 70

Expert Comment

by:KCTS
ID: 24038908
password history  - yes - but if the person chnaging this is a domain admin, then tey could just switch it off again.
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 
LVL 70

Expert Comment

by:KCTS
ID: 24038921
... and for that matter they could clear the security log - it all boils down to "how much do you trust your Domain Admins!
0
 

Author Closing Comment

by:quippee
ID: 31565296
I think this will help us identify the source. Thanks
0
 
LVL 16

Expert Comment

by:speshalyst
ID: 24039007
KCTS.. you are bang on about the Trust thing :)
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now