Windows Administrator password retrival

Hi All,

A client of mine got paranoid about 1 of her workers over hearing the network administrators password so she took it on her self to change the password, but of course she cannot now remember what she changed it too.

The server is a Dell Poweredge 860 running Small business Server 2003, with 3 SCSI disks in Raid 5. There is also a 750gb SATA drive installed for storage.

I've tried running the normal ophcrack which has worked for me in the past but doesn't seem to be seeing the hard disks. I'm persuming this is cause ophcrack ain't got the driver for the Raid controller,

So my question is 2 fold, what is the best way for me to recover the password and if ophcrack is the best, how do you load a Raid driver in ophcrack?

Thanks in advance for your help
Dara
LVL 1
daraelliottAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

houssam_balloutCommented:
0
ConchCrawlCommented:
You need to download a utility and burn it to a bootable cd that will allow you to reset the password. Trying to crack the passwor is like beating your head against the wall, eventually it iwll hurt.
The link that houssam posted may work. I have used many of these and they work most are either free or shareware. Here is another link I trust:
http://www.petri.co.il/forgot_administrator_password.htm
Hope this helps.
0
Introducing the "443 Security Simplified" Podcast

This new podcast puts you inside the minds of leading white-hat hackers and security researchers. Hosts Marc Laliberte and Corey Nachreiner turn complex security concepts into easily understood and actionable insights on the latest cyber security headlines and trends.

Rob WilliamsCommented:
Recovering the password is near impossible. You will need to reset the password. Most of the password reset tools such as listed above will not work, as they are for non-domain controllers.

The process is not easy but is outlined in the following link. I recently did so and it works well. As outlined you need to change the AD restore mode password using Petter Nordahl-Hagen 's boot disk, then create a service that will change the password at boot.
http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003_ad.htm
There are very few options on A DC, the only other I am aware of is to buy 3rd party software such as:
http://www.lostpassword.com/windows-enterprise.htm
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DavidPresidentCommented:
Give RobWill the points ... he is first person to give you correct & complete info.  He beat me to the punch :)
0
vdevine15Commented:
One thing to keep in mind:

If they have encrypted files under that account, and you reset it via this method, you will lose access to those files, pretty much for good, because you break the keypair used for encryption.

Everyone's right on target with the info however: reset, don't recover, with just about any of those utilities.
0
daraelliottAuthor Commented:
sorry for the delay in awarding the points, thanks a million for all the help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.