To totally unlock this section you need to Log-in
Login
How to change/reset the Local Administrator password on a Microsoft Domain Controller? Well, it can't be done: not directly from the MMC or from an interactive session on the server.
See, the Active Directory database replaces the local user database, so you can’t use the “Local Users and Groups” MMC Snap-in. The Directory Services Restore Mode (DSRM) Administrator password fills the void where you’d normally need a local administrator password, for example when using the Recovery Console.
There are some weird commands to know to accomplish this, and this is one of those occasions where Microsoft actually provides clear and easy to follow documentation. Login as an administrator on the domain controller. Click Start, Run, and then type ntdsutil. It will prompt you "ntdsutil:", type "set dsrm password" and hit Enter.
It will prompt you "Reset DSRM Administrator Password:". You would really think this is where you would type the new password wouldn’t you? Well, you’d be wrong. Type "reset password on server null".
The "null" part tells the command to operate on the current server (seems like “.”, or “\\.” would be a more consistent convention here). Hit Enter and it will finally prompt you to change the password, and once more for confirmation. When you are finished type "q" to quit DSRM password reset mode, and "q" again to exit the ntdsutil utility.
ntdsutil: set dsrm password
Reset DSRM Administrator Password: reset password on server null
Please type password for DS Restore Mode Administrator Account: *********
Please confirm new password: *********
Password has been set successfully.
Reset DSRM Administrator Password: q
ntdsutil: q
Now when you reboot you'll can login to begin running a disk check, for example, in Recovery Console.
Microsoft Windows(R) Recovery Console.
The Recovery Console provides system repair and recovery functionality.
Type EXIT to quit the Recovery Console and restart the computer.
1: C:\WINDOWS
Which Windows installation would you like to log onto
(To cancel, press ENTER)? 1
Type the Administrator password: *********
C:\WINDOWS>chkdsk C: /p /r
NOTE: This functionality is available from Microsoft Windows Server 2003 and above, and has been integrated into the NTDSUTIL tool. A member of the Domain Administrators group sets the DSRM administrator password during the process of domain controller promotion (dcpromo).
 |  |