Solved

How to know the password for domain admin user?

Posted on 2011-03-09
12
643 Views
Last Modified: 2012-05-11
Is there anyway to know the password for the domain administrator (Key trap, Third parity, Hidden User)?
0
Comment
Question by:aaltayeb
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
  • 2
  • +2
12 Comments
 
LVL 74

Expert Comment

by:Glen Knight
ID: 35087678
why don't you just reset it so you know what it is?
0
 

Author Comment

by:aaltayeb
ID: 35087749
What I'm trying to say can  I protect myself by adding a hidden user or a software told me if the  password has been changed, and what is the password? Alternatively, is there a command to find out the password for the administrator in the domain? On the other hand, to know the password without change the password.
0
 
LVL 1

Expert Comment

by:IWillHelp
ID: 35087757
Yes, there are ways of revealing the password for the Administrator as well as resetting it... but I would like to know why you need to reset this, if you do not know what it is?  

I am personally not privy to revealing how to hack into the Domain Admin account when security rules prohibit it.

Please explain more.
0
Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

 
LVL 74

Expert Comment

by:Glen Knight
ID: 35087764
it is against EE's terms of use to provide you with information to circumvent your network security.
0
 

Author Comment

by:aaltayeb
ID: 35087811
How can I test my security? I know that is locked like a hack lesson, but how I now the holes' security in my system? If one of my employees left and change the password, and I don't have an access to my server?
0
 

Author Comment

by:aaltayeb
ID: 35087950
As I see that I can change the password by using a bootable CD like the following:
http://www.tech-pro.net/howto-lost-administrator-password.html
However, how to reveal the password for any user?
I can change the password by a bootable CD like "ERD Commander" from Lock Smith, I don't remember the name, but again how to reveal the password?
0
 
LVL 11

Assisted Solution

by:TheGorby
TheGorby earned 100 total points
ID: 35088145
The domain administrator can reset any domain user's password, so there is no need to be able to see what it currently is. If you just need to access a user's resources (mailbox, files etc.) then the domain admin should already have permissions for those as well; if not, the domain admin can take ownership.

If there is only one domain administrator account in your organization and only one person that knows the password to that account, I would suggest making sure at least 2 people know that password in case of any "unfortunate events" (fired employee, death, etc.)
0
 
LVL 47

Assisted Solution

by:Donald Stewart
Donald Stewart earned 100 total points
ID: 35088163
The most common way users hack a password is with a certain kind of tables(That I choose not to mention). Other than that there's no more that can be provided to you thru this forum on that type of subject. You would have to research this yourself.
0
 
LVL 1

Accepted Solution

by:
IWillHelp earned 300 total points
ID: 35088190
I honestly know of no way to reveal the password legitimately.  

As for your security, I would suggest one of 2 ways of combatting the issue presented:
1. If you currently know the ADMINISTRATOR password, secure it in a safe place off-site so that only 1 person will know it and can recover it.  This would be in the form of the CEO, etc.  Then create a secondary AD Administrator log in in the Domain Administrator's group.  So if the scenerio exists of a person changes the password of this second (or third) log in name, you still have the original to unlock the system.

2. If you are also in need of recovering the password as the way it was, restore the system backup, from the previous day, as long as you are backing up the Complete Domain / AD / System State in your nightly backups.

As you stated, you are correct that in many versions you can change the password with ERD Commander, but to reveal it is not an option that I am aware of.

Hope that helps you in the security conundrum posed.
0
 

Author Comment

by:aaltayeb
ID: 35088329
What I understand it from all of you that there is no-legitimately way to reveal the password, but with a certain kind of tables, we can reveal the password for domain admin user account. Moreover, there are websites can help me in this matter, but it will be no-legitimately. Therefore, can someone provide me one of these websites.As I know that some software will check the SAM in the active directory, and show the password, but I don't need it, what I'm asking can I now the password or change it without using a bootable CD?
0
 

Author Closing Comment

by:aaltayeb
ID: 35088439
Thanks.
0

Featured Post

Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question