?
Solved

Administrator password hacked on Windows 2003 SBS

Posted on 2014-04-28
7
Medium Priority
?
98 Views
Last Modified: 2014-11-24
The Administrator password on a Windows 2003 SBS running Exchange no longer works. I believe the server was hacked. I tried booting from Password Recovery disc and RESET the password to nothing but that did not work either. IBM Server running RAID1. How do I get back into the server or recover the lost or changed password? Redoing server is not an option since there are over 250 exchange accounts.
0
Comment
Question by:interc3905
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 35

Expert Comment

by:Bembi
ID: 40028051
As SBS uses domain accounts, can you access the domain?
As long as you can access the domain, you can reset the admin password via AD. But this assumes, that you can logon as a domain admin, otherwise you will not have permissions to change it.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 40028060
Do you have any other Domain Admin accounts configured on the domain?

If you do you can login as that account and reset the administrator password using:

net user administrator newpassword /domain
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40028146
There are paid tools out their that let you boot to a CD/DVD and blank out the domain administrator password.

Video and blog post about using one of these tools.
http://supertekboy.com/2014/02/13/password-crack-a-domain-controller-in-under-a-minute/

You can probably find free tools out there as well.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Accepted Solution

by:
interc3905 earned 0 total points
ID: 40028214
I was able to create a BOOT disc from here: http://pogostick.net/~pnh/ntpasswd/

And then reset the password to blank. I am in now.
0
 
LVL 35

Expert Comment

by:Bembi
ID: 40029099
What may be a reason - as it is very common - possibly was a knock out. If the admin account is also used for services or applications. it can just be knocked out by to much wrong logons.
i.e. Sharepoint has an option, to change the passwords automatically.

I would first create a second domain admin you can use for logon. Then search for the reason, why the original admin changes its password. As Sharepoint is also part of SBS, I would assume something in this direction. Search the security log for failed logons of the admin, see when it starts and which application / machine / whatever tried to logon shortly gefore it stopped working.
0
 

Author Comment

by:interc3905
ID: 40067224
See our earlier comment as how we resolved the issue - interc3905 on 4/28
0
 

Author Closing Comment

by:interc3905
ID: 40461736
See post
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question