changing domain admin password

WAMSINC
WAMSINC used Ask the Experts™
on
hi everyone, I am about to change the domain admin password on a windows active directory domain. The old sys admin is no longer with the company. Anything to watch out for before I change it ?
thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
He may have been running services or scheduled tasks under the account, unfortunately without checking every system you won't know until you change it.

At a minimum I'd check the RunAs account on all Exchange, SQL, Backup and Windows Cluster servers just to be sure.


Also do you know the directory services restore mode password for the Domain Controllers? If you don't then as a precaution you could reset it prior to changing the Domain Admin password so in the event of any catastrophic errors you could restore the domain from backup. Unlikely but better to know it than not.

http://support.microsoft.com/kb/322672
N-W
Commented:
You may also want to check the account is not being used to authenticate storage access for backup purposes. For example, check that backup software isn't using it to access an SMB share to backup or that there isn't a script running on a Linux server which backs up files to your Windows shares which uses the admin's credentials.
Distinguished Expert 2018
Commented:
To help you, this freeware comes in handy. It shows what accounts are used for services and scheduled tasks, domain wide: http://www.cjwdev.co.uk/Software/ServiceCredMan/Info.html

Author

Commented:
thanks

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial