RE: Windows 2000 Administrator lockout

From: Sottile, Michael (Michael.Sottile_at_53.com)
Date: 08/16/04

  • Next message: James Swanson: "Re: Windows 2000 Administrator lockout" 
    To: focus-ms@securityfocus.com
Date: Mon, 16 Aug 2004 10:47:00 -0400

    Hey Robert,

    You could download l0phtcrack from http://www.securityfocus.com/tools/1005.
    Point it at your sam file from the server and just let it run. It might
    take many weeks for it to complete, but it does a pretty good job. If you
    can, copy the sam file from your server to the fastest (clockspeed-wise)
    machine you have and run it there. However, if you can't even get to the
    sam file w/o the admin password... this sure wouldn't work at all. :-(

    ~Michael

    -----Original Message-----
    From: Robert Ritchey [mailto:rritchey@eods.com]
    Sent: Friday, August 13, 2004 5:56 PM
    To: focus-ms@securityfocus.com
    Subject: Windows 2000 Administrator lockout

    Hello All,

    The network that I have is rather small. 1 server, and 4 workstations.
    I inherited the systems. There has been no administrator working there
    for a little over a year. What administrator that was there, was very
    much non-technical.

    When the network was built whoever built the server installed everything
    they possibly could. This system now how few main functions:
    1. File server
    2. Internet Gateway
    3. Symantec Virus manager

    Nobody knows any of the passwords for anything on the system. Any of
    the passwords that are in use are not allowed administrator access. I
    do mean for anything! I can't even get Symantec to update virus
    signatures, as I do not have a password to do the update with. The
    signature is like 2003 date.

    It is just very frustrating!

    I am looking for options, before I have to go and reformat and rebuild.
    This would in some ways make life simpler, there are wrinkles in that
    all of there operational data and other services are on the server. We
    are currently moving foreword with a plan to rebuild. This will happen;
    I would rather pick the time to do it. Rather than have it forced on
    me.

    Does anyone know of any other way to take control of this machine and
    network.

    Thanks for your time and any ideas will be appreciated.

    Robert Ritchey

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: James Swanson: "Re: Windows 2000 Administrator lockout"

    Relevant Pages

    • Managing our complete company using Microsoft products
      ... Directory, Mail Server, File Server and Print Server. ... Directory and network, while the other one has 6 peer-to-peer Windows 2000 ... We do not have a system administrator, and we do not have the resources or ... who wrote this are doing all of their project management and enterprise ...
      (microsoft.public.project)
    • Managing our complete company using Microsoft products
      ... Directory, Mail Server, File Server and Print Server. ... Directory and network, while the other one has 6 peer-to-peer Windows 2000 ... We do not have a system administrator, and we do not have the resources or ... who wrote this are doing all of their project management and enterprise ...
      (microsoft.public.office.misc)
    • Re: Where are DC signatures stored in AD ? Can then be edited using adsiedit ?
      ... These entries ARE ONLY on DC1 (server with SAM Error) and have Names of ... Name: 'Administrator' ... Our live network at the time only had one 2000 ... signature for the first DC. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Cant Save to Server issue has come back even though UIDs of local users are unique
      ... each of your users appears to the server to be the same person. ... ensure that each machine on your network has a unique UID. ... If you are uncomfortable working in Terminal, you need to engage a Unix ... properly, simply because I am a technical writer, not a Unix Administrator ...
      (microsoft.public.mac.office.word)
    • RE: Exchange Information Store Security? Send As...
      ... I'm no Exchange expert, but it would seem to me that giving trusted ... the server on the security of your user's application. ... This monitoring should be assigned to a system or network ... administrator as an ongoing task, ...
      (Focus-Microsoft)