• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 100
  • Last Modified:

Administrator password hacked on Windows 2003 SBS

The Administrator password on a Windows 2003 SBS running Exchange no longer works. I believe the server was hacked. I tried booting from Password Recovery disc and RESET the password to nothing but that did not work either. IBM Server running RAID1. How do I get back into the server or recover the lost or changed password? Redoing server is not an option since there are over 250 exchange accounts.
0
interc3905
Asked:
interc3905
1 Solution
 
BembiCEOCommented:
As SBS uses domain accounts, can you access the domain?
As long as you can access the domain, you can reset the admin password via AD. But this assumes, that you can logon as a domain admin, otherwise you will not have permissions to change it.
0
 
Alan HardistyCo-OwnerCommented:
Do you have any other Domain Admin accounts configured on the domain?

If you do you can login as that account and reset the administrator password using:

net user administrator newpassword /domain
0
 
Gareth GudgerCommented:
There are paid tools out their that let you boot to a CD/DVD and blank out the domain administrator password.

Video and blog post about using one of these tools.
http://supertekboy.com/2014/02/13/password-crack-a-domain-controller-in-under-a-minute/

You can probably find free tools out there as well.
0
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

 
interc3905Author Commented:
I was able to create a BOOT disc from here: http://pogostick.net/~pnh/ntpasswd/

And then reset the password to blank. I am in now.
0
 
BembiCEOCommented:
What may be a reason - as it is very common - possibly was a knock out. If the admin account is also used for services or applications. it can just be knocked out by to much wrong logons.
i.e. Sharepoint has an option, to change the passwords automatically.

I would first create a second domain admin you can use for logon. Then search for the reason, why the original admin changes its password. As Sharepoint is also part of SBS, I would assume something in this direction. Search the security log for failed logons of the admin, see when it starts and which application / machine / whatever tried to logon shortly gefore it stopped working.
0
 
interc3905Author Commented:
See our earlier comment as how we resolved the issue - interc3905 on 4/28
0
 
interc3905Author Commented:
See post
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now