?
Solved

Admin password reset

Posted on 2011-09-29
7
Medium Priority
?
396 Views
Last Modified: 2012-05-12
Hi All,

Our contract with our outsourced IT support services has been terminated and we will managing things in house until we asses alternatives. So naturally to protect ourselves I and company asset's we will need to change the local servers admin password and domain admin password. However I dare say that there are services and applications running within our network that are connected to the Directory service using domain admin credentials and if the application is performing critical task of querying / writing data using the credentials , then I we will  end up in a trouble.

My question is, does anyone have any advise and tips on how best to tackle both the ressetting of the admin passwords for our Exchange, File and Terminal server and domain controller admin password> and also does anyone know of any useful utilities that can assist in finding out which applications and services are running and connected using the admin credentials?

Thanks again,

A
0
Comment
Question by:Adma1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 1

Accepted Solution

by:
pdantro earned 1000 total points
ID: 36814809
You should be able to open the task manager and serivces.msc to see what processes are running and what credentials they are using. To change the domain admin account password you will need a user account with domain admin rights then use active directory to change the admin password.
0
 
LVL 7

Assisted Solution

by:CSorg
CSorg earned 1000 total points
ID: 36815195
besides services, installed software could be using administrator/admin accounts

for instance Backup Software ; see in the application itself if there is a username/password being used.
0
 

Author Comment

by:Adma1
ID: 36861456
OK thanks for the advice,

I have gone into services.msc and there appears to be a handful of services running under the domain/\admin user, is it just a matter of going into the properties of this service and changing the "log on as" details to reflect the new admin password?

Also the remainder of the other services are running under 'local service' and 'network service' are these service OK to leave as is?

Thanks,
A
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 7

Assisted Solution

by:CSorg
CSorg earned 1000 total points
ID: 36889991
Yes
0
 
LVL 1

Assisted Solution

by:pdantro
pdantro earned 1000 total points
ID: 36890966
If you have already changed the domain admin passwords it will propagate and you shouldn't need to change anything for the log on as. The log on as allows the service to run at elevated privileges without needing the admin to physically be there to start and stop the service and supply elevated privileges when needed.

Were you able to reset your domain admin password?
0
 

Author Comment

by:Adma1
ID: 36895709
I have successfully reset the domain\admin password and I am just wanting to clarify the best method of resetting the local admin password for each server. Will I need to create a secondary admin account in order to reset local admin password?
0
 
LVL 23

Expert Comment

by:yo_bee
ID: 36895744
@pdantro
That is not true.
You do need to set the password in the service or there will be a mismatch.

0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Suggested Courses
Course of the Month14 days, 19 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question