Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've tried the SRVANY trick documented here. After rebooting 3 times into Directory Service Restore mode and tweaking the settings, I have not been able to log-in successfully. So, I'm not having much luck. I also saw a reference to Ophcrack, but from the website it doesn't look like that tool supports Windows Server 2003.

This is an isolated dev system, and it only has one domain administrator.

share|improve this question
up vote 6 down vote accepted

Actually, just a few hours ago I tried exactly that trick - on a Windows 2008 (Core) domain controller. It worked perfectly. Did you use the script linked at the bottom of that guide? Exactly what does "not having much luck" mean?

share|improve this answer
No, I was doing the steps manually. I will see how the script works for me. – magnifico May 18 '09 at 20:36
Remember to edit the account name (in one of the script files) to match the domain account you want to change password for, and of course run it in AD restore mode. I think I did a "net start pwdReset" before I rebooted but that should not be needed. If you forget to change the account name you can uninstall the service with instsrv pwdReset REMOVE and try again. – Oskar Duveborn May 18 '09 at 20:45
Yippee! The script, and your tips, worked. – magnifico May 18 '09 at 21:09
Wonderful, then two lab systems have been saved by that script today ^^ – Oskar Duveborn May 18 '09 at 21:29

You have another domain admin reset the password... ;)

Is this the only domain admin account in the domain?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.