+ Post New Thread
Results 1 to 6 of 6
Windows Server 2008 R2 Thread, Changing Admin Password in Technical; Hi Guys, I am looking at changing the administrators password on a 2008 R2 DC, we have had some unusual ...
  1. #1
    staningrimsby's Avatar
    Join Date
    Jan 2013
    Location
    Grimsby
    Posts
    143
    Thank Post
    5
    Thanked 4 Times in 4 Posts
    Rep Power
    3

    Changing Admin Password

    Hi Guys,

    I am looking at changing the administrators password on a 2008 R2 DC, we have had some unusual things happening lately on the server i.e the backup being paused for a week (this was my assistants job to check not mine by the way), home directories being re-named and user accounts changing ???

    I have had a look on the server and there is no sign of any remote software installed but think the previous administrator may still have a VPN on his laptop and still be able to dial in.

    Before I change the administrators password how can I check what services might be dependant on the account as they will also be affected as well.

    Cheers
    Stan.

  2. #2

    elsiegee40's Avatar
    Join Date
    Jan 2007
    Location
    Kent
    Posts
    10,629
    Thank Post
    1,771
    Thanked 2,155 Times in 1,594 Posts
    Rep Power
    767
    Look out for logmein on the server too... Or on an another server that connects to it

  3. #3
    staningrimsby's Avatar
    Join Date
    Jan 2013
    Location
    Grimsby
    Posts
    143
    Thank Post
    5
    Thanked 4 Times in 4 Posts
    Rep Power
    3
    It did used to have logmein installed but I revoked access when I started.

  4. #4

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,783
    Thank Post
    572
    Thanked 2,151 Times in 981 Posts
    Blog Entries
    23
    Rep Power
    625
    I would also check for all accounts in the various administrator groups. In past experience you will be far more likely to find an account with admin privileges than having the main admin account compromised, which, TBH, you shouldn't be using anyway.

  5. #5
    staningrimsby's Avatar
    Join Date
    Jan 2013
    Location
    Grimsby
    Posts
    143
    Thank Post
    5
    Thanked 4 Times in 4 Posts
    Rep Power
    3
    Just checked the services and it looks like the only ones affected will be the web filtering and backup exec, both of these are using the domain administrator account.

  6. #6
    markwilfan's Avatar
    Join Date
    Feb 2009
    Posts
    163
    Thank Post
    32
    Thanked 20 Times in 16 Posts
    Rep Power
    14
    I'd be looking at finding out who was doing these changes and how. Takes ages but you could scour the logs on the DC. Filter by specific events would help.

    If it is a previous admin he certainly needs to be brought to justice. Not at all funny.

    Might be worth having a password reset procedure documented IE which passwords are used where. Substitute numbers for passwords if you can't bear to write them down

SHARE:
+ Post New Thread

Similar Threads

  1. Change domain admin password
    By chrbb in forum Windows
    Replies: 9
    Last Post: 23rd March 2009, 06:23 PM
  2. HELP! Recovering Windows 2003 Admin password
    By crc-ict in forum Windows
    Replies: 7
    Last Post: 8th September 2006, 06:40 PM
  3. Allowing staff to change kids passwords
    By Simcfc73 in forum How do you do....it?
    Replies: 28
    Last Post: 21st August 2006, 07:55 PM
  4. Replies: 8
    Last Post: 19th July 2006, 01:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •