Domain Admin Password...

I've never had to change a domain admin password before, but I do know it needs to be changed in different locations.

Does anyone know exactly which locations I would have to change it in??

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

meadIT

What do you mean by domain password? If you mean the password you enter to add a DC to a domain, stuff like that, you're probably looking for the Domain Admins password. There could be many accounts and many different users with that authority. Check ADUC under the Domain Admins group.

arwes

ADUC, go the OU containing the account you need to reset. Right click, and reset password. Well, that's the way I do it anyways. Unless I'm reading your post wrong.

meadIT

FadeToBright wrote: »

Last edited by FadeToBright; Today at 11:36 AM.

There you go editing to clarify your posts while I'm replying again.

HeroPsycho

Before you do it, I would highly recommend you verify no critical apps are using the account as a Service account. You can do that easily via a script.

Also, make sure you have an additional account with the same rights in case that account gets locked because someone logged into an RDP session or something with that password with drives mapped, and causes the account to get locked.

vCole

HeroPsycho wrote: »

Before you do it, I would highly recommend you verify no critical apps are using the account as a Service account. You can do that easily via a script.

Also, make sure you have an additional account with the same rights in case that account gets locked because someone logged into an RDP session or something with that password with drives mapped, and causes the account to get locked.

How would I do this with a script??

HeroPsycho

Resulting Script from Last Post - Windows Live

PowerShell rules...

vCole

HeroPsycho wrote: »

Resulting Script from Last Post - Windows Live

PowerShell rules...

You're the man

Claymoore

Here is a link to a Powershell script that will check a list of servers (just export a list from ADUC) for any non-standard service accounts:
Finding Services Using non-System Accounts With PowerShell - Michael's meanderings...

I thought a had a simpler version from the 2008 Security ResKit that I modified to output to a text file, but it must be on a flash drive at home somewhere. I'll post it if I find it tonight.

Ahriakin

Also verify you are not using EFS encrypted files for the admin. If so change the password while you are logged in to that account. Doing a reset from ADUC will break your encryption key store access.