Archived from groups: microsoft.public.win2000.security (More info?)

I'm trying to get access to a Windows 2000 Server, that is a Domain
Controller. Oh no I said the DC word. The old admin isn't around, he's
dead. So now what? Administrator is the only account, besides guest which
is disabled. It was a dumb AD deployment. I mean who only makes 1 account!?!

Anyways, this server uses an LSI 21320-R U320 SCSI Controller Card R1 SCSI
card. I tried to use some freeware utility from
"http://home.eunet.no/~pnordahl/ntpasswd" but it doesn't find any of my
partitions cause it doesn't support my controller. Bummer, cause this
utility is awesome otherwise.

Is there any other way to reset the password, or at least edit the registry
so that I can edit HKEY_USERS\.Default\Control Panel\Desktop and change the
logon.scr to cmd.exe.

I was going to change that registry key so that I can access a cmd prompt
from DSRM boot.

Any help is greatly appreciated.

Archived from groups: microsoft.public.win2000.security (More info?)

The real built in administrator account for the domain can not be disabled
in Windows 2000. It can be disabled in Windows 2003 but is available in safe
mode with networking start. The link below is the only way I know to do what
you want. For those that think this is a vulnerability of Windows 2000, the
user needs full physical access to the domain controller which is one reason
why they must be physically secured. This is true for any operating
system. --- Steve

http://www.petri.co.il/reset_domai [...] 000_ad.htm

"BogdanSUA" <BogdanSUA@discussions.microsoft.com> wrote in message
news:E65BC4C5-DBDC-4F17-81FE-C2107D4B8D7F@microsoft.com...
> I'm trying to get access to a Windows 2000 Server, that is a Domain
> Controller. Oh no I said the DC word. The old admin isn't around, he's
> dead. So now what? Administrator is the only account, besides guest
> which
> is disabled. It was a dumb AD deployment. I mean who only makes 1
> account!?!
>
> Anyways, this server uses an LSI 21320-R U320 SCSI Controller Card R1 SCSI
> card. I tried to use some freeware utility from
> "http://home.eunet.no/~pnordahl/ntpasswd" but it doesn't find any of my
> partitions cause it doesn't support my controller. Bummer, cause this
> utility is awesome otherwise.
>
> Is there any other way to reset the password, or at least edit the
> registry
> so that I can edit HKEY_USERS\.Default\Control Panel\Desktop and change
> the
> logon.scr to cmd.exe.
>
> I was going to change that registry key so that I can access a cmd prompt
> from DSRM boot.
>
> Any help is greatly appreciated.

Archived from groups: microsoft.public.win2000.security (More info?)

You maybe able to take a ghost image and restore it to another box and try
from there. It may be worth looking for some network password utilities.

"BogdanSUA" wrote:

> I'm trying to get access to a Windows 2000 Server, that is a Domain
> Controller. Oh no I said the DC word. The old admin isn't around, he's
> dead. So now what? Administrator is the only account, besides guest which
> is disabled. It was a dumb AD deployment. I mean who only makes 1 account!?!
>
> Anyways, this server uses an LSI 21320-R U320 SCSI Controller Card R1 SCSI
> card. I tried to use some freeware utility from
> "http://home.eunet.no/~pnordahl/ntpasswd" but it doesn't find any of my
> partitions cause it doesn't support my controller. Bummer, cause this
> utility is awesome otherwise.
>
> Is there any other way to reset the password, or at least edit the registry
> so that I can edit HKEY_USERS\.Default\Control Panel\Desktop and change the
> logon.scr to cmd.exe.
>
> I was going to change that registry key so that I can access a cmd prompt
> from DSRM boot.
>
> Any help is greatly appreciated.