Change Domain Adminstrator Password? best way

Hey everyone,

Im gonna need some help,!! my manager is leaving next Thursday and my director has asked me to change all the passwords!!!! ok. great.

What is the best way to change the domain administrator password? I have a forest with 8 sub domains which different passwords on each domain. Do I change the password on the Primary DC and then on each sub domain DC?

Has anyone done this before? any good documents out there which I can follow?

What problems am i likley to encounter if It all goes wrong???

Thanks.....

Matt!!

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

RussS

fommy wrote:

Hey everyone,

Im gonna need some help,!! my manager is leaving next Thursday and my director has asked me to change all the passwords!!!! ok. great.

What is the best way to change the domain administrator password? I have a forest with 8 sub domains which different passwords on each domain. Do I change the password on the Primary DC and then on each sub domain DC?

Has anyone done this before? any good documents out there which I can follow?

What problems am i likley to encounter if It all goes wrong???

Thanks.....

Matt!!

Based on what you describe, that is the way I would be handling it.

astorrs

First step would be to make sure you have another account with Domain Admin (or Enterprise Admin - even better) prior to starting out.

HeroPsycho

If you have a universal user name and password for local admin accounts that he knew, you should change those as well.

Also, ensure that no critical app service is using the account as a service account.

blargoe

And check all the Domain Admins and Enterprise Admins groups to see if there are any other accounts that should have passwords changed.

ANY account with local rights on servers should be looked at too. Also, whatever account you're using to back up your Exchange server should be changed too, if it has admin on the exchange store, it can get into any mailbox and do whatever they please