Solved

Administrator password hacked on Windows 2003 SBS

Posted on 2014-04-28
7
92 Views
Last Modified: 2014-11-24
The Administrator password on a Windows 2003 SBS running Exchange no longer works. I believe the server was hacked. I tried booting from Password Recovery disc and RESET the password to nothing but that did not work either. IBM Server running RAID1. How do I get back into the server or recover the lost or changed password? Redoing server is not an option since there are over 250 exchange accounts.
0
Comment
Question by:interc3905
7 Comments
 
LVL 35

Expert Comment

by:Bembi
ID: 40028051
As SBS uses domain accounts, can you access the domain?
As long as you can access the domain, you can reset the admin password via AD. But this assumes, that you can logon as a domain admin, otherwise you will not have permissions to change it.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 40028060
Do you have any other Domain Admin accounts configured on the domain?

If you do you can login as that account and reset the administrator password using:

net user administrator newpassword /domain
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40028146
There are paid tools out their that let you boot to a CD/DVD and blank out the domain administrator password.

Video and blog post about using one of these tools.
http://supertekboy.com/2014/02/13/password-crack-a-domain-controller-in-under-a-minute/

You can probably find free tools out there as well.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Accepted Solution

by:
interc3905 earned 0 total points
ID: 40028214
I was able to create a BOOT disc from here: http://pogostick.net/~pnh/ntpasswd/

And then reset the password to blank. I am in now.
0
 
LVL 35

Expert Comment

by:Bembi
ID: 40029099
What may be a reason - as it is very common - possibly was a knock out. If the admin account is also used for services or applications. it can just be knocked out by to much wrong logons.
i.e. Sharepoint has an option, to change the passwords automatically.

I would first create a second domain admin you can use for logon. Then search for the reason, why the original admin changes its password. As Sharepoint is also part of SBS, I would assume something in this direction. Search the security log for failed logons of the admin, see when it starts and which application / machine / whatever tried to logon shortly gefore it stopped working.
0
 

Author Comment

by:interc3905
ID: 40067224
See our earlier comment as how we resolved the issue - interc3905 on 4/28
0
 

Author Closing Comment

by:interc3905
ID: 40461736
See post
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question