how do I change AD recovery mode password?

[Mark Scott]

Hi, I was reading about AD restore mode and I realised that I have no idea
what the restore mode passwords are on the DCs. I have seen KB article
239803 however that assumes that I already know the old passwords.

What can I do?

 

[Matjaz Ladava [MVP]]

As DS restore mode password is stored in SAM database on DC, you can use
this method to reset DS restore mode password
http://home.eunet.no/~pnordahl/ntpasswd/. I have used it on several ocasions
and it worked.

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[Ulf B. Simon-Weidner]

Hi, I was reading about AD restore mode and I realised that I have no idea
what the restore mode passwords are on the DCs. I have seen KB article
239803 however that assumes that I already know the old passwords.

What can I do?

Hi Mark,

you can use NTDSUtil to set the password on WS2k3:

322672 HOW TO: Reset the Directory Services Restore Mode Administrator Account
Password in Windows Server 2003
http://support.microsoft.com/?id=322672

Since you can specify a different machine it might be possible to run that
remote against a W2k too, but I have not tried that.

Gruesse - Sincerely,

Ulf B. Simon-Weidner

 

[Jordan]

This one doesn't requires you to know the old password (i think, have not
tried it).

How to Change the Recovery Console Administrator Password on a Domain
Controller
http://support.microsoft.com/?id=239803