Solved

Admin password reset

Posted on 2011-09-29
7
395 Views
Last Modified: 2012-05-12
Hi All,

Our contract with our outsourced IT support services has been terminated and we will managing things in house until we asses alternatives. So naturally to protect ourselves I and company asset's we will need to change the local servers admin password and domain admin password. However I dare say that there are services and applications running within our network that are connected to the Directory service using domain admin credentials and if the application is performing critical task of querying / writing data using the credentials , then I we will  end up in a trouble.

My question is, does anyone have any advise and tips on how best to tackle both the ressetting of the admin passwords for our Exchange, File and Terminal server and domain controller admin password> and also does anyone know of any useful utilities that can assist in finding out which applications and services are running and connected using the admin credentials?

Thanks again,

A
0
Comment
Question by:Adma1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 1

Accepted Solution

by:
pdantro earned 250 total points
ID: 36814809
You should be able to open the task manager and serivces.msc to see what processes are running and what credentials they are using. To change the domain admin account password you will need a user account with domain admin rights then use active directory to change the admin password.
0
 
LVL 7

Assisted Solution

by:CSorg
CSorg earned 250 total points
ID: 36815195
besides services, installed software could be using administrator/admin accounts

for instance Backup Software ; see in the application itself if there is a username/password being used.
0
 

Author Comment

by:Adma1
ID: 36861456
OK thanks for the advice,

I have gone into services.msc and there appears to be a handful of services running under the domain/\admin user, is it just a matter of going into the properties of this service and changing the "log on as" details to reflect the new admin password?

Also the remainder of the other services are running under 'local service' and 'network service' are these service OK to leave as is?

Thanks,
A
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 7

Assisted Solution

by:CSorg
CSorg earned 250 total points
ID: 36889991
Yes
0
 
LVL 1

Assisted Solution

by:pdantro
pdantro earned 250 total points
ID: 36890966
If you have already changed the domain admin passwords it will propagate and you shouldn't need to change anything for the log on as. The log on as allows the service to run at elevated privileges without needing the admin to physically be there to start and stop the service and supply elevated privileges when needed.

Were you able to reset your domain admin password?
0
 

Author Comment

by:Adma1
ID: 36895709
I have successfully reset the domain\admin password and I am just wanting to clarify the best method of resetting the local admin password for each server. Will I need to create a secondary admin account in order to reset local admin password?
0
 
LVL 23

Expert Comment

by:yo_bee
ID: 36895744
@pdantro
That is not true.
You do need to set the password in the service or there will be a mismatch.

0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question