Re: 2003 Domain Controller Local Administrator Password

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/01/05 

Date: Tue, 1 Mar 2005 00:14:01 -0600

When you first dcpromo a server to the first domain controller in the domain
the password you specify for the built in admin account that is used for DS
restore is the same as the built in administrator account for the domain
until you change the password for the domain administrator account via AD
Users and Computers. The local built in administrator account of a domain
controller is not available outside of DS Restore or Recovery Console logon
for that domain controller. --- Steve

"Gaza" <Gaza@discussions.microsoft.com> wrote in message
news:42E7EB9D-2497-4005-A130-9F3CC59D7230@microsoft.com...
> Thank you for your answer.
> Im talking about the local\administrator account and not the AD restore
> account.
> When you add a server to the domain you have an option on logging on as
> domain admin or local admin. When you promote to a DC the local\admin
> logon
> is not primitted from the login screen. However if you connected the admin
> shares like C$, when prompted for a password enter
> computername\administrator
> and the password you used during the windows 2003 server installation, the
> password you used to login before you ran dcpromo.
>
> "Steven L Umbach" wrote:
>
>> If you mean the actual local administrator account that is used for only
>> Directory Services Restore and Recovery Console you can use setpwd or
>> ntdsutil. For the administrator account for the domain use AD Users and
>> Computers to change or reset the password. --- Steve
>>
>> http://support.microsoft.com/kb/810037 --- setpwd
>>
>> "Gaza" <Gaza@discussions.microsoft.com> wrote in message
>> news:B71A490C-A7E0-479E-83F7-CA07C58E63FC@microsoft.com...
>> > During the installation of 2003 you enter a admin pasword.
>> > They in some cases you run dcpromo and promote to a AD DC.
>> > The local administrator account and password still work.
>> >
>> > How do you chang the local administrator password on a domain
>> > controller?
>>
>>
>>

Relevant Pages

  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Please help, no administrator access!
    ... hidden admin account i had to admin to activate it, ... clicked command prompt ... of keys in the form of another administrator account just in case. ...
    (microsoft.public.windows.vista.security)
  • Re: Vista Security Problem
    ... Have you changed any security permissions on files recently? ... Using the built-in administrator account, start the local group policy editor for both the local computer and your normal username: ... > running yet I cannot find the security service in admin tools/computer ...
    (microsoft.public.windows.vista.general)
  • Re: Recovery from total hack
    ... full admin permissions and then disable Administrator Account. ... Well of course passwords should be strong :-) ... ...
    (microsoft.public.win2000.security)
  • RE: windows xp servicepack 2
    ... "Access Denied" error when trying to install SP2 ... Log onto the computer via the built in administrator account (in Win XP Home ... and only remaining admin account does not have full admin priviledges. ...
    (microsoft.public.windowsupdate)