Re: 2003 Domain Controller Local Administrator Password

From: Gaza (Gaza_at_discussions.microsoft.com)
Date: 02/28/05 

Date: Sun, 27 Feb 2005 22:25:02 -0800

Thank you for your reply but this is not true.
There has always been a local and domain administrator on a DC, even in the
days of NT4. There were two different utilities, one for domain accounts and
one for local.2003 does not have that option as it is removed when you
dcpromo.

When you add a server to the domain you have an option of logging on as
domain admin or local admin. When you promote to a DC the local\admin logon
is not primitted from the login screen. However if you connected to the admin
shares like C$, when prompted for a password enter computername\administrator
and the password you used during the windows 2003 server installation, the
password you used to login before you ran dcpromo. It works!

"DJ Borell" wrote:

> "Gaza" <Gaza@discussions.microsoft.com> wrote in message
> news:B71A490C-A7E0-479E-83F7-CA07C58E63FC@microsoft.com...
> > During the installation of 2003 you enter a admin pasword.
> > They in some cases you run dcpromo and promote to a AD DC.
> > The local administrator account and password still work.
> >
> > How do you chang the local administrator password on a domain controller?
>
> Once it became the domain controller, all accounts became domain accounts.
> There are no "local" accounts on a DC. You manage domain accounts with AD
> Users & Computers.
>
>
>

Relevant Pages

  • Re: file permission strangeness
    ... > The permissions were actually fine. ... >> are indeed logged on as the local administrator and not a decoy account ... >> with domain accounts if there is a problem with the servers secure ...
    (microsoft.public.win2000.security)
  • Re: Wht happens to domain accounts after dcpromo to stand-alone server?
    ... The domain accounts will be gone, as well as all of the other ... Build a temporary server, run dcpromo to make it another DC in the ... domain, move the fsmo roles over, and he will retain your AD ...
    (microsoft.public.windows.server.general)