Domain Administrator Password

Recently engaged it company who upgraded our server to Windows server 2012 R2...we want to change the domain admin password supplied by contractor so we know that no one else can use it including contractor...found out they are abit dodgy
LVL 1
Snowbella KilangitAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chris MillardCommented:
That's easy enough, but might have consequences. You can log on as the domain admin, then once logged in, press CTRL-ALT-DEL and choose the option to change the password.

Remember though, that some services may be running under the same account, and if so, you will need to change the services to use the new password as well.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Snowbella KilangitAuthor Commented:
How can I find those services that are dependent on admin user?
0
Chris MillardCommented:
On the server, open up the Services console - beside each installed service, it will show you what account is being used.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Snowbella KilangitAuthor Commented:
Thank you ... I would do this on the host machine and all VM inside?
0
Snowbella KilangitAuthor Commented:
Also what can possibly go wrong? And what can I do to avoid problems?
0
Chris MillardCommented:
You will need to make the changes on all machines that use any services under the domain admin account. After the service logon details have been changed, the services will need to be stopped and restarted. You can do this per service, or if convenient, you could reboot the server.
0
Will SzymkowskiSenior Solution ArchitectCommented:
To ensure that you do not run into an issue like this again, it is important to create Service Accounts i.e (svc_SQL, svc_citrix etc). You should have multiple services accounts that are used for each service. Never use Domain Admin account for this. Besides checking the services you will also need to make sure that there are no "Scheduled Tasks" that are using the Domain Admin Password to run the task itself.

If you do not have any services or tasks using this account then chaning the password should not have any affects at all.

Will.
0
Snowbella KilangitAuthor Commented:
Hi Experts
Thank you all I have checked the services and yes there are a few.
Can this be verified for me...that I need to :-
Change Local Host
Change Domain admin pwd
Change DSRM
Any advice will be appreciated
Thank you
0
Will SzymkowskiSenior Solution ArchitectCommented:
Just change the domain admin password. You can also change the local admin password using LAPS (Local Admin Password Solution).
https://technet.microsoft.com/en-us/library/security/3062591.aspx

You do not need to change the DSRM password. Although it is a good idea to make sure these passwords are all the same. The DSRM password is setup before you promote a domain controller. DRSM passwords do not need to be the same but you should keep consistency with these passwords.

Will.
0
Snowbella KilangitAuthor Commented:
Thank you Experts, have changed the password and rebooted server, no problems so far, however will just watch the events logs
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.