Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My friend forgot all Administrator password (BUILTIN\Administrator, Domain Administrator, Recovery Mode Password) for his w2ks SBS based domain. I've found article about resetting domain admin password.

I want to know: are there any implications on reset AD Administrator password? I know, that resseting user password result in loss of key to decrypt EFS encrypted data. Are any other consequences or implications?

I was thinking about backup procedure:

  1. Shutdown all domain controllers (1 - its SBS domain :)
  2. Take bit by bit image copy of DC disks (if something goes wrong), restore by copy image back to disk.
  3. Reset password

Do you recomend any other steps?

share|improve this question
    
If someone was logging in as administrator, and for some insane reason, they had saved passwords in IE, they would lose the saved passwords after a password reset on the account. –  Zoredache Dec 17 '10 at 2:12

2 Answers 2

up vote 0 down vote accepted

To know what the implications of changing a password are you first need to know exactly where the password is used. At the very least you need to check all services and scheduled tasks, as some of those may be running under one of the accounts you will be changing.

share|improve this answer

There's only 1 Administrator password because there's only 1 Administrator account. Knowing the Recovery Mode password wouldn't help as you still wouldn't know the Administrator password after performing an authoritative restore.

share|improve this answer

protected by sysadmin1138 May 20 '11 at 1:39

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.