Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

How to hack into my own Active Directory?

Posted on 2010-08-16
6
Medium Priority
?
1,795 Views
Last Modified: 2013-12-04
So while my boss is out on training for the week I managed to lock my own administrator account within my AD. We only have 1 DC, 1 exchange server, and 2 storage servers. And other than my boss, I am the only person in the office with domain admin rights. How can I hack into my DC and unlock my account? Worst case secenario is me calling my boss and asking him for his credentials over the phone but since we work in a secure environment then that phone can not take place.

Any suggestions? This is very important as I unlock other user accounts and perform routine system maintenance on a weekly basis
0
Comment
Question by:Truffryderz99va
6 Comments
 
LVL 2

Expert Comment

by:Beghemot
ID: 33449056

Do you have access to the Enterprise Admin account?
0
 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 33449105
No such thing as an Enterprise Admin account.  In a secure network, the DOMAIN admin account will be renamed and disabled and each user will have their own domain admin accounts that MAY be a member of the Enterprise Admin GROUP.

Question - how would YOU have a secure environment if we could tell you how to hack into your own server?  Which would be worse - having your boss get annoyed with you for doing this... or bringing down the entire AD because you tried to be sneaky about it?

Call your boss.  Have him VPN in or otherwise connect remotely and unlock your account.  If this is not an option, then you appear to have found a flaw in your security... and your boss will have to tell you his password.

And in the future, if you think this is likely to happen again, create TWO admin accounts per person.  OR, purchase and use self-service account unlocking software like the product Quest offers (probably not cheap).  Or create an emergency admin account that has its password secured some place probably with another person so that there's a record of when it's used and by who.
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 33452498
For the future, if it's not out of your security bounds, you can edit the Account lockout policy and set "account lockout duration" to i.e. 60 minutes.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Author Comment

by:Truffryderz99va
ID: 33456828
Thanks for the help but I managed to figure it out myself. Thanks again for the suggestions!
0
 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 33456976
I object, at least until you name the third party tool.
0
 

Accepted Solution

by:
Truffryderz99va earned 0 total points
ID: 33457330
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question