Solved

Administrator password hacked on Windows 2003 SBS

Posted on 2014-04-28
7
93 Views
Last Modified: 2014-11-24
The Administrator password on a Windows 2003 SBS running Exchange no longer works. I believe the server was hacked. I tried booting from Password Recovery disc and RESET the password to nothing but that did not work either. IBM Server running RAID1. How do I get back into the server or recover the lost or changed password? Redoing server is not an option since there are over 250 exchange accounts.
0
Comment
Question by:interc3905
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 35

Expert Comment

by:Bembi
ID: 40028051
As SBS uses domain accounts, can you access the domain?
As long as you can access the domain, you can reset the admin password via AD. But this assumes, that you can logon as a domain admin, otherwise you will not have permissions to change it.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 40028060
Do you have any other Domain Admin accounts configured on the domain?

If you do you can login as that account and reset the administrator password using:

net user administrator newpassword /domain
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40028146
There are paid tools out their that let you boot to a CD/DVD and blank out the domain administrator password.

Video and blog post about using one of these tools.
http://supertekboy.com/2014/02/13/password-crack-a-domain-controller-in-under-a-minute/

You can probably find free tools out there as well.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Accepted Solution

by:
interc3905 earned 0 total points
ID: 40028214
I was able to create a BOOT disc from here: http://pogostick.net/~pnh/ntpasswd/

And then reset the password to blank. I am in now.
0
 
LVL 35

Expert Comment

by:Bembi
ID: 40029099
What may be a reason - as it is very common - possibly was a knock out. If the admin account is also used for services or applications. it can just be knocked out by to much wrong logons.
i.e. Sharepoint has an option, to change the passwords automatically.

I would first create a second domain admin you can use for logon. Then search for the reason, why the original admin changes its password. As Sharepoint is also part of SBS, I would assume something in this direction. Search the security log for failed logons of the admin, see when it starts and which application / machine / whatever tried to logon shortly gefore it stopped working.
0
 

Author Comment

by:interc3905
ID: 40067224
See our earlier comment as how we resolved the issue - interc3905 on 4/28
0
 

Author Closing Comment

by:interc3905
ID: 40461736
See post
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out what you should include to make the best professional email signature for your organization.
In-place Upgrading Dirsync to Azure AD Connect
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

742 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question