Change the domain controller administrator password

Reprinted: the world of computers

---- When you promote a Windows 2000-based standard server to a domain controller, you will be asked to enter an administrator password for restoring the Directory Service and restoring the console. It is different from the Administrator password stored in the Active Directory after the upgrade.

---- The administrator password used when you start the Recovery Console (or press F8 to enter the directory service recovery mode) is stored in the registry-based security account manager (SAM) on the local computer, you can find it in the System32Config directory of the system directory. The SAM-based account and password are special symbols of the computer and will not be copied to other controllers in the domain.

---- You can modify the password of the local SAM administrator to easily implement Domain Controller management or other additional security measures. To modify the administrator password in the Recovery Console or directory service recovery mode, you must first disable the domain controller that you want to change the password and restart the machine (when the menu is displayed, press F8 to enter the Advanced startup options), and then select the directory service recovery mode. After Successful Logon, you can change the local administrator password as follows.

---- Enter the following command in the command line:

---- Net user administrator *

---- This command will prompt you to change the password of the local administrator.

---- Close and restart the computer. Now you can use the new Administrator password to log on to the recovery console or the directory service recovery mode.

---- If you forget the password of the SAM-based Administrator Account (which will prevent you from logging on to the directory service recovery mode), you can use the following method to obtain the password of the administrator account.

Method 1

---- If Windows 2000 is installed in the FAT or FAT32 partition, you can use the ms dos or Windows 95/98 boot disk to start the computer, copy the original SAM in the Repair directory of the system directory to the System32Config directory when the Windows Installer is initialized. If Windows 2000 is installed in the NTFS partition, move the hard disk to another Windows 2000-based computer, or install Windows 2000 (parallel installation) to obtain the NTFS partition entry, copy the original sam in the system directory Repair to System32Config.

---- Note: This method only applies to the password that you remember when Windows 2000 was initially installed.

Method 2

---- Downgrade the domain controller to a standard server, and then run dcpromo.exe to upgrade the server again. During the upgrade, you can enter the new directory service recovery mode administrator password.