Administrator password hacked on Windows 2003 SBS

The Administrator password on a Windows 2003 SBS running Exchange no longer works. I believe the server was hacked. I tried booting from Password Recovery disc and RESET the password to nothing but that did not work either. IBM Server running RAID1. How do I get back into the server or recover the lost or changed password? Redoing server is not an option since there are over 250 exchange accounts.
interc3905Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
interc3905Connect With a Mentor Author Commented:
I was able to create a BOOT disc from here: http://pogostick.net/~pnh/ntpasswd/

And then reset the password to blank. I am in now.
0
 
BembiCEOCommented:
As SBS uses domain accounts, can you access the domain?
As long as you can access the domain, you can reset the admin password via AD. But this assumes, that you can logon as a domain admin, otherwise you will not have permissions to change it.
0
 
Alan HardistyCo-OwnerCommented:
Do you have any other Domain Admin accounts configured on the domain?

If you do you can login as that account and reset the administrator password using:

net user administrator newpassword /domain
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
Gareth GudgerCommented:
There are paid tools out their that let you boot to a CD/DVD and blank out the domain administrator password.

Video and blog post about using one of these tools.
http://supertekboy.com/2014/02/13/password-crack-a-domain-controller-in-under-a-minute/

You can probably find free tools out there as well.
0
 
BembiCEOCommented:
What may be a reason - as it is very common - possibly was a knock out. If the admin account is also used for services or applications. it can just be knocked out by to much wrong logons.
i.e. Sharepoint has an option, to change the passwords automatically.

I would first create a second domain admin you can use for logon. Then search for the reason, why the original admin changes its password. As Sharepoint is also part of SBS, I would assume something in this direction. Search the security log for failed logons of the admin, see when it starts and which application / machine / whatever tried to logon shortly gefore it stopped working.
0
 
interc3905Author Commented:
See our earlier comment as how we resolved the issue - interc3905 on 4/28
0
 
interc3905Author Commented:
See post
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.