How to reset Windows 2008 R2 Domain Controller "Administrator" password?

Hello Everyone,
I have lost Administrator password for the following system:
Windows 2008 R2
Domain Controller setup on same machine
Stand alone server - no workstations or other servers invovled
I still have the "Directory Service Restore Password" but I don't think that helps me for lost Administrator password. I beleive I need to boot from an .iso file to gain access. I already tried "Offline NT Password & Registery Editor" and it has set
Administrator password to (blank) but that is not allowing me access as it seems that I have to login to domain controller Administrator. So, how can I reset that password?
Thanks

It wasn't difficult to reset the domain password and I think Microsoft's policy of not providing an easy forward way is to create an
illusion of security which is not there. Linux systems that are much more secure that MSFT software allow easy password reset when physical access is there so why not include the same tools in System Repair tools or using F8?
Anyhow, this guide helped me reset the password in 5 minutes. Read the bottom of it to find the scripted / automatic version of the process:
http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003_ad.htm
Thanks,

Similar Messages

How to Reset Windows 2008/R2 Domain Administrator Password

How to Reset Windows Server 2008/R2 Domain Administrator password if forgot or lost it?
It is annoying and bad to forget a Windows Server 2008/r2 Domain administrator login password. It is troublesome unless you have that Windows Server 2008/r2 password reset disk. We can still find several tricks to reset Windows Server Domain password but they require a mass of operations and waste a lot of time. For example, you can reset Windows Server 2008/R2 domain administrator password with an installation disk but it requires you to type a mass of command line. So today I want to share everyone an omnipotent method to reset Windows Server 2008/R2 Domain/local administrator password. You need the following 3 things.
An accessible PC.
A USB/CD/DVD flash drive.
The Windows password reset tool Daossoft Windows Password Rescuer.
Then it requires 4 steps as below:
Step 1: Download and install Daossoft Windows Password Rescuer into that accessible computer.
Step 2: Burn it to the flash drive.
Step 3: Boot your Windows Server computer from the flash drive.
Step 4: Follow its instruction and click “Reset Password” button to reset your Windows 2008/R2 Domain/Local administrator password.
More details in this video: Windows Server 2008 R2 Password Reset - Reset Domain or Local Password.

It wasn't difficult to reset the domain password and I think Microsoft's policy of not providing an easy forward way is to create an
illusion of security which is not there. Linux systems that are much more secure that MSFT software allow easy password reset when physical access is there so why not include the same tools in System Repair tools or using F8?
Anyhow, this guide helped me reset the password in 5 minutes. Read the bottom of it to find the scripted / automatic version of the process:
http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003_ad.htm
Thanks,

Windows 2008 R2 Domain Controller (PDC) - NTP server - time showing local CMOS clock

I'm having issues setting an external source on a Windows 2008 R2 domain controller (PDC emulator role for the domain)
Here is the output showing its source is the Local CMOS clock.
C:\Windows\System32>w32tm /query /status
Leap Indicator: 0(no warning)
Stratum: 1 (primary reference - syncd by radio clock)
Precision: -6 (15.625ms per tick)
Root Delay: 0.0000000s
Root Dispersion: 10.0000000s
ReferenceId: 0x4C4F434C (source name: "LOCL")
Last Successful Sync Time: 06/11/2014 15:44:15
Source: Local CMOS Clock
Poll Interval: 6 (64s)
1) I have performed the following on the DC with the PDC role:
net stop w32time
w32tm /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org"
w32tm /config /reliable:yes
net start w32time
w32tm /query /configuration
[Configuration]
EventLogFlags: 2 (Local)
AnnounceFlags: 5 (Local)
TimeJumpAuditOffset: 28800 (Local)
MinPollInterval: 6 (Local)
MaxPollInterval: 10 (Local)
MaxNegPhaseCorrection: 172800 (Local)
MaxPosPhaseCorrection: 172800 (Local)
MaxAllowedPhaseOffset: 300 (Local)
FrequencyCorrectRate: 4 (Local)
PollAdjustFactor: 5 (Local)
LargePhaseOffset: 50000000 (Local)
SpikeWatchPeriod: 900 (Local)
LocalClockDispersion: 10 (Local)
HoldPeriod: 5 (Local)
PhaseCorrectRate: 7 (Local)
UpdateInterval: 100 (Local)
[TimeProviders]
NtpClient (Local)
DllName: C:\Windows\System32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
AllowNonstandardModeCombinations: 1 (Local)
ResolvePeerBackoffMinutes: 15 (Local)
ResolvePeerBackoffMaxTimes: 7 (Local)
CompatibilityFlags: 2147483648 (Local)
EventLogFlags: 1 (Local)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600 (Local)
Type: NTP (Local)
NtpServer: 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org (Local)
NtpServer (Local)
DllName: C:\Windows\System32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations: 1 (Local)
VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
But still showing the output:
C:\Windows\System32>w32tm /query /status
Leap Indicator: 0(no warning)
Stratum: 1 (primary reference - syncd by radio clock)
Precision: -6 (15.625ms per tick)
Root Delay: 0.0000000s
Root Dispersion: 10.0000000s
ReferenceId: 0x4C4F434C (source name: "LOCL")
Last Successful Sync Time: 06/11/2014 15:58:45
Source: Local CMOS Clock
Poll Interval: 6 (64s)
2. If I resync and rediscover the following error appears:
w32tm /resync /rediscover
Sending resync command to local computer
The computer did not resync because no time data was available.
3. I've also clearing the current time config, by
net stop w32time
w32tm /unregister
w32tm /register
net start w32time
But no change, it still shows the Local CMOS clock.
4. This event is showing
Log Name: System
Source: Microsoft-Windows-Time-Service
Date: 06/11/2014 15:43:30
Event ID: 12
Task Category: None
Level: Warning
Keywords:
User: LOCAL SERVICE
Computer: domaincontroller1
Description:
Time Provider NtpClient: This machine is configured to use the domain hierarchy to determine its time source, but it is the AD PDC emulator for the domain at the root of the forest, so there is no machine above it in the domain hierarchy to use as a time source.
It is recommended that you either configure a reliable time service in the root domain, or manually configure the AD PDC to synchronize with an external time source. Otherwise, this machine will function as the authoritative time source in the domain hierarchy.
If an external time source is not configured or used for this computer, you may choose to disable the NtpClient.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Time-Service" Guid="{06EDCFEB-0FD0-4E53-ACCA-A6F8BBF81BCB}" />
<EventID>12</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-11-06T15:43:30.465619200Z" />
<EventRecordID>77295</EventRecordID>
<Correlation />
<Execution ProcessID="256" ThreadID="2056" />
<Channel>System</Channel>
<Computer>domaincontroller1</Computer>
<Security UserID="SID" />
</System>
<EventData Name="TMP_EVENT_DOMAIN_HIERARCHY_ROOT">
</EventData>
</Event>
5. If I perform the below it appears DC2 is having problems but I'm not sure if related.
C:\w32tm /monitor
DC1.domain.local *** PDC ***[192.168.1.1:123]:
ICMP: 0ms delay
NTP: +0.0000000s offset from DC1.domain.local
RefID: 'LOCL' [0x4C434F4C]
Stratum: 1
DC2.domain.local[192.168.1.2:123]:
ICMP: 0ms delay
NTP: -110.4925481s offset from DC1.domain.local
RefID: (unspecified / unsynchronized) [0x00000000]
Stratum: 0
DC3.domain.local[192.168.2.1:123]:
ICMP: 0ms delay
NTP: -0.0256084s offset from DC1.domain.local
RefID: DC1.domain.local [192.168.1.1]
Stratum: 2
DC4.domain.local[192.168.2.4:123]:
ICMP: 0ms delay
NTP: -0.0011524s offset from DC1.domain.local
RefID: 80.84.77.86.rev.sfr.net [86.77.84.80]
Stratum: 2
Warning:
Reverse name resolution is best effort. It may not be
correct since RefID field in time packets differs across
NTP implementations and may not be using IP addresses.
Any help would be much appreciated. Thanks.
Craig Brand

I suspected some issue with AV so uninstalled.
To resolve the Access Denied I followed these steps:
stop w32time
w32tm /unregister
reboot
regsvr32 /u w32time.dll
w32tm /register
sc query w32time -- you should see that the service is set to
shared mode -- this is presumably how it should be -- if you try to start right now, you'll get the expected 1290 SID-related error
reboot
w32time should now automatically start at boot up and be running -- that was my result -- it's running as shared, started on its own, and I can do the w32tm /query commands successfully
After rebooting the time service started.
I then repeated the steps:
net stop w32time
w32tm /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org"
w32tm /config /reliable:yes
net start w32time
w32tm /query /configuration
And all worked. I'll wait a short while to see if this fixes the issue. I also have am SA case with MS so will confirm fix when resolved.
Craig Brand

How to reset windows 2008 R2 Local Administrator password

Hi Team,
I have forget windows 2008 R2 local admin password, the server is not in domain , is it any way to reset local administrator password.
Regards,
Triyambak
Regards, Triyambak

When your Windows Server 2008 R2 computer is still accessible, you can reset or change your administrator password with ease by the following steps.
Step 1: Log in your Windows Server 2008 R2 computer through the administrator account.
Step 2: Click on “Start” on the lower left corner of your screen, and hit “Control Panel”, and then doubt-click on "User Account".
Step 3: Choose “Make changes to your user account”, and then click on “Change your password”.
Step 4: Now you will be asked to enter your current password, type in it.
Step 5: Enter your new password and retype it to confirm your new password. You are optional to type in a word or phrase as the hint of the new password. It is highly recommended.
Another tip, Using a password recovery tool to recover WIndows server 2008 administrator password
This is a universal WIndows password recovery method which can fix any Windows system password issue.
1. Get Windows Password Rescuer and install it on another computer.
2. Burn password reset disk into USB or CD/DVD device with Windows password recovery.
3. Boot Windows server from password reset USB or CD disk
4. Reset forgotten Windows server 2008 local or domain admin password without data loss.
Detailed steps: http://www.wimware.com/how-to/reset-windows-server-2008-password.html
I also have seen a way that users can use a Windows server 2008 install CD to reset the administrator password, you could search and have a try.

Windows 2008 R2 Domain Controller, Tracking of helpdesk staff invloved in unlock account, password reset

Dear All,
We recently gave permissions to group of level 1 staff to unlock OR reset password of users. In case user calls and report his account is locked OR if his password expires.
I want to track by auditing just in case something goes wrong, I can check in auditing. I have created a new GPO and select success/failure for Computer Config > Windows Settings > Security Settings > Local Policies > Audit Policy "Audi
Account Management"
applied it on domain top level and I did not changed settings of 'default Domain Policy' which is also linked on top level of domain.
But after applying this I am unable to see any event 4724 of password re-set when I attempted to test this GPO. What else is required to be done in order to trace users in group 'level1' if they change any body password.
Please assist.
thank you

Hello,
Total two DC's in our environment. But now I figured out and it is working now. It was supposed to set in Advanced audit policy > User account management, I enabled it for success and failure and my newly created GPO is applied on domian top in addition
to default domain policy.
I am able to see unlock events, password change events in my security log. So, it is working.
Thank you,
Wajeeh

Question about adding Windows 2012 R2 Domain Controller, into a native Windows 2008 R2 single forest domain

I current have a two server domain, both Windows 2008 R2 and fully updated. The two servers are on subnet 10.0.1.0 /24
- Windows 2008 R2 Server A: 10.0.1.1 (DC, GC, FSMO, DNS)
- Windows 2008 R2 Server B: 10.0.1.2 (DC, GC)
AD Domain: COMPANY.LOCAL
I have a second connected subnet, 192.168.1.0 /24) which is routed to the 10.0.1.0/24 subnet and I would like to install a Windows 2012 R2 server onto a server on that subnet and make it a domain controller with AD-Integrated DNS and DHCP for the 192.168.1.0
/24 subnet.
- Windows 2012 R2 Server C: 192.168.1.1
What are the proper progression steps, in order to bring up the Windows 2012 R2 server and then add it to my COMPANY.LOCAL domain and then promote it do a DC/GC/AD-Integrated DNS server? Are they anything like the following:
1. Install Windows 2012 R2 server (Server C)
2. Point Windows 2012 R2 server DNS servers at Server's A and B
3. Perform AD prep to extend AD schema to support Windows 2012 R2 domain controllers
4. Promote Windows 2012 R2 server to domain controller (install local DNS service on Server C, during this step)
* Question: Will Windows automatically create a DNS zone for the Windows 2012 R2 subnet (192.168.1.0/24) AND also include the DNS zone from the previous Windows 2008 R2 domain (10.0.1.0 /24)? Or will I need to add the 10.0.1.0 /24 zone to the DNS
server on Server C, even though the DNS from the Windows 2008 R2 domain is AD integrated?

Hi,
Regarding the issue here, please take a look into below articles:
System Requirements and Installation Information for Windows Server 2012 R2
http://technet.microsoft.com/en-us/library/dn303418.aspx
Release Notes: Important Issues in Windows Server 2012 R2
http://technet.microsoft.com/en-us/library/dn387077.aspx
Install a Replica Windows Server 2012 Domain Controller in an Existing Domain (Level 200)
http://technet.microsoft.com/en-us/library/jj574134.aspx
Here is an example for promoting Windows Server 2012 to a DC, see:
Step-by-Step Guide for Setting Up A Windows Server 2012 Domain Controller
http://social.technet.microsoft.com/wiki/contents/articles/12370.step-by-step-guide-for-setting-up-a-windows-server-2012-domain-controller.aspx
As the server is promoted to a DC, DNS Zones will be replicated and synchronized to it automatically whenever the new one is added to an AD DS domain, bascially there is no special need to add zones, for more information, please see:
Understanding Active Directory Domain Services Integration
http://technet.microsoft.com/en-us/library/cc726034.aspx
Hope this may help
Best regards
Michael
If you have any feedback on our support, please click
here.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Windows Server 2008 R2 Domain Controller NOT logging EventID 4740

EventID 4740 (account lockout) is not being logged to the event viewer. When searching through the security log there are none to be found. Having accounts locked out and no logging is driving me nuts. Hope someone has run into this before. This is what
i have checked thus far.
>Windows Server 2008 R2 Domain Controller
>Verified the following GPO settings are set and correct:
>Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\ all are set for Success & Failure
>Computer Configuration\Windows Settings\Security Settings\Advanced Audit Configuration\Logon/Logoff) is set for Success and Failure
>Powershell command Get-Eventlog -log Security -InstanceId 4740 returns no results which makes sense since there are no entries in the security log file.
>No 4740 entries in the netlogon.log debug file
AD and the LockoutStatus tool show the account is locked out but i still have nothing in the logs.
Anyone have any ideas? From everything i can find online , it appears i have everything set properly.
Thanks, Chico

Hi Chico,
I suggest you try to enable this group policy below:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\Audit account management
More information for you:
Missing 4740 EventID's
http://social.technet.microsoft.com/Forums/windowsserver/en-US/c9871d72-7439-46b5-98e6-a7fadfa6ff28/missing-4740-eventids?forum=winserversecurity
If you have multiple Domain Controllers, check this event on other DCs, too.
Please feel free to let us know if there are any further requirements.
Best Regards,
Amy Wang

Cannot generate Account Logon Events (Event ID 4624) in Security Event Log on Server 2008 R2 Domain Controller

I have configured the Default Domain Controller's policy to log SUCCESS for Account Logon Events in the Server 2008 R2 Domain Controller, but these events are not logging in the Security Event log.
Default Domain Controllers Policy
Computer Configuration/Windows Settings/Security Settings/Local Policies/Audit Policies/Audit Account Logon Events = Success.
What tools can I use to troubleshoot this further? The results of "Auditpol.exe /get /category:*" are below.
System audit policy
Category/Subcategory                      Setting
System
Security System Extension               No Auditing
System Integrity                        No Auditing
IPsec Driver                            No Auditing
Other System Events                     No Auditing
Security State Change                   No Auditing
Logon/Logoff
Logon                                   No Auditing
Logoff                                  No Auditing
Account Lockout                         No Auditing
IPsec Main Mode                         No Auditing
IPsec Quick Mode                        No Auditing
IPsec Extended Mode                     No Auditing
Special Logon                           No Auditing
Other Logon/Logoff Events               No Auditing
Network Policy Server                   No Auditing
Object Access
File System                             No Auditing
Registry                                No Auditing
Kernel Object                           No Auditing
SAM                                     No Auditing
Certification Services                  No Auditing
Application Generated                   No Auditing
Handle Manipulation                     No Auditing
File Share                              No Auditing
Filtering Platform Packet Drop          No Auditing
Filtering Platform Connection           No Auditing
Other Object Access Events              No Auditing
Detailed File Share                     No Auditing
Privilege Use
Sensitive Privilege Use                 No Auditing
Non Sensitive Privilege Use             No Auditing
Other Privilege Use Events              No Auditing
Detailed Tracking
Process Termination                     No Auditing
DPAPI Activity                          No Auditing
RPC Events                              No Auditing
Process Creation                        No Auditing
Policy Change
Audit Policy Change                     No Auditing
Authentication Policy Change            No Auditing
Authorization Policy Change             No Auditing
MPSSVC Rule-Level Policy Change         No Auditing
Filtering Platform Policy Change        No Auditing
Other Policy Change Events              No Auditing
Account Management
User Account Management                 No Auditing
Computer Account Management             No Auditing
Security Group Management               No Auditing
Distribution Group Management           No Auditing
Application Group Management            No Auditing
Other Account Management Events         No Auditing
DS Access
Directory Service Changes               No Auditing
Directory Service Replication           No Auditing
Detailed Directory Service Replication No Auditing
Directory Service Access                No Auditing
Account Logon
Kerberos Service Ticket Operations      No Auditing
Other Account Logon Events              No Auditing
Kerberos Authentication Service         No Auditing
Credential Validation                   Success

Hi Lawrence,
After configuring the GPO, did we run command gpupdate/force to update the policy immediately on domain controller? Besides, please run command gpresult/h c:\gpreport.html to check if the audit policy
setting was applied successfully.
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

Windows 2008 R2 domain controllers with Windows 2003 forest functional level Supported after Windows 2003 support ends in July 2015

Hi
Anyone knows whether Windows 2008 R2 domain controllers with Windows 2003 forest functional level will still be Supported after Windows 2003 support ends in July 2015 ?
Thanks

When Windows Server 2003 support ends, you should not have a Windows Server 2003 Domain Controller running if you would like to be supported by Microsoft. This means that there will be no reason to have a DFL or FFL that is lower than Windows Server 2008.
So, if you are keeping Windows Server 2003 FFL to keep DCs running Windows Server 2003 then this is not supported.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

RAC on windows 2000 with domain controller

Guys,
I need advise on the following implementation.
We have 2 IBM Xseries 365 Servers , 1 FastT600 Storage Windows 2000 Advanced Server, Oracle 9i, Oracle RAC
We have plan of integrating 2 servers in Windows 2000 Cluster, one server would act as Domain Controller and second will act as Additional Domain Controller in the MS Cluster. We would be installing Oracle 9i Enterprise s/w on each one of these server's internal disks and datafiles on shared storage ( FastT600 ).. We would need to install Oracle RAC as well. As per Oracle recommandation, the cluster nodes shouldn't act as Domain controller. We didn't find any logical and techinical answer for this recommandation. Can anyone guide me as why is it so? and any issue may arise if we don't have separate doamin controller?
Is it really required to have separate Domain controller ?
Early replies would be appretiated..
Thanks & Regards,
Sam

Hello hanspjacobsen,
1. According to the subjects System Requrements - Windows 2008 R2 Domain Controllers do support
Windows 8.1/2012 R2 admx deployment with some limitations regarding down-level server version of course. So yes - you can download and use it. Doubtfully the GPO presence in AD could
harm Exchange in any way.
2. With the course of updates for Exchange 2010 and Windows Server - I'm pretty sure we can expect Exchange 2010 supporting W2012 R2 DCs with close upcoming updates. So the full interoperability for those two is just a matter of little time.
▲ Vote if Helpful / Mark if Answer
MCSE: Messaging 2013 Charter / Private Cloud / Server Infrastructure
MaximumExchange.ru

Renaming Windows Server 2012 Domain Controller with Exchange Server 2013

Is it possible to rename Windows Server 2012 Domain Controller, as we are using Exchange Server 2013 as a member server on Windows Server 2012 ?
We have some issues with the Domain Name, so want to rename..
Maybe somebody knows the best practices how to do this in best way???
Thanks.

Hello,
You should do the following:
1. Promote another DC.
2. Transfer FSMO roles to that server.
3. Decommission old DC.
4. Rename it.
5. Promote it again as DC.
Here is useful link:
http://technet.microsoft.com/en-us/library/cc782761(v=ws.10).aspx#bkmk_renamesingle.
Hope it helps,
Adam
www.codetwo.com
If this post helps resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others
find the answer faster.

How to reset Windows 7/Vista/XP/2000 password if you forgot or lost windows

How to reset Windows 7/Vista/XP/2000 password if you forgot or lost windows password
It is truly very often for us to meet the password problem, sometimes we would forgot windows password or lost windows password, and could not login windows system and make a big trouble. At this time, you would hope to find a way to reset and recover the forgotten password.
Actually, a lot of methods are available to recover or reset the Windows password. But most of them are designed for PC experts, not common PC users, those solutions are too complicated to get it work for us. And in this article, I will show you a professional software tool which could help you to reset forgotten windows password easily.
Total Windows Password Reset is powerful password recovery software to reset Windows admin
passwords for you to login Windows OS without reinstalling the OS when you forgot windows password or lost windows password. It could remove windows password and set the password to blank. Just boot from the program CD/DVD or USB flash drive, choose the account you wish to reset and all will be done. It is not a method to crack or bypass windows password, just remove or delete windows password and set it to blank so you could login windows to set new password.
Below is the guide of how to reset windows password with this software, only 3 steps are needed to reset windows 7/Vista/XP password:
Step 1: Download the setup file of Total Windows Password Reset on the official website:
http://www.resetwindowspassword.net/downloads/totalwpr.exe
And install it on another PC. Then you could startup the password recovery software to prepare the bootable disc.
Step 2: Burn the windows password recovery bootable CD/DVD or USB disc with the software.
Now, you may select “Burn DVD/CD Disc” or “Use USB Disc”. If you select first method, you need to have a blank CDR/DVDR disk, a COMBO or DVDRW drive on the PC. If you select to use USB disc, you just need to pay attention: This USB devices would be formatted, so you must make sure to back up all the data before use it. And the maximum capacity of the USB devices cannot exceed 2G.
Tips: We recommend you to use the DVD/CD method to do the windows password reset, because some computers may not support USB start-up.
Below is step by step to show you how to burn the CD/DVD
1. Launch Total Windows Password Reset main window, Click “Burn DVD/CD Disc” button.
2. In BurnCC’s main window, click “Browse” button and in the open window, locate the file “TWPR.iso” on your desktop, select it and click on Open to get back to the main window. Then, click “Start” button.
3 Your DVD drive should open and insert a blank CD-R or DVD-R disc into the drive and close it. Click “OK” button. Your CD will be burned in a few minutes.
Tips: if there is already a CD/DVD disc in the drive before run the software, the CD drive will open automatically . Please close it again. The process will be continuing.
Below is step by step to show you how to burn the USB drive
1 Insert a USB drive into a USB slot on your computer and run Total Windows Password Reset, Click “Use USB Disc” button.
2 Click“Step1”button. Then, Right-click on the usb_format.exe and choose “Run as Administrator”.
3 In USB Disk Storage Format window, set the file system to FAT, Check the Quick Format box, check the Create DOS Bootable Disk, Browse to the DOS_files folder on your Desktop, click OK & then Start.
4. Click OK on the following window and then close the USB format tool. Your USB drive now is formatted.
5. Click “Step2” button and open the USB drive with your computer. Then, copy the files from the USB_files folder and paste them directly to the USB drives main directory. 2 of the files may become hidden and you will not see them on the USB drive. This is okay. Your USB drive is now complete.
Step 3: Boot your PC with the burned CD/DVD or USB disc to reset windows password.
You need to insert the Created CD/DVD or USB drive into the optional drive of the locked computer and reboot it.
Tips: It your computer still boots from hard drive Windows OS, it's necessary for you to change your COMS or BIOS settings to make it boot from CD/DVD or USB drive. If you don’t know how to set it, you may visit the official website: http://www.resetwindowspassword.net or contact the computer manufacture.
The computer boots from CD/DVD or USB drive, then
1 The program will ask for the Windows OS hard drive volume. Enter the ID number of the hard drive volume that Windows is installed.
2 The program has detected all the user names of Windows and asks which user name password is to be removed. Enter the ID number for the User Name.
3 The program asks to confirm weather to remove the password or not. Enter "y" (yes) to confirm your action and "n" (no) to deny the action and hit "Enter".
4 The program asks whether to continue to remove passwords for other accounts. Enter "y" to continue and "n" to finish. Eject your USB from your computer first and press any key to restart the computer from Windows. Now you can log in Windows with an empty password (with no password.), just click “Enter” when you login.
If you have any questions of the procedure and the settings, you could visit the website:http://www.resetwindowspassword.net or send email to [email protected].
Now you could see that to reset or recover the admin login password of windows OS: XP, Vista, Windows 7 or 2000 is not so difficult and you can do it with ease.

Very interest posting. Thank you for this detailed description and useful links.
If you have more interesting stuff to share with us you are welcome.

How to Reset Windows 8 Admin Password without Disk

Problem:Forgot Windows 8 admin password and no reset disk available, how can I reset Windows 8 admin password? On the occasion, how to reset password on Windows 8 seems to be our problematic issue. However, the problem looks difficult, not difficult actually. Two factors make efforts on it. One is the new characteristics of Windows 8 system, the other is software technology development. So just let me help you to solve it. Just choose one and put it into practice:1. Get User password via Windows Password Hint.2. Get into computer with PIN code, and reset password for locked account.3. Login windows 8 Via Microsoft MSN Account.4. Reset Windows password with another available admin account.5. Reset Windows 8 password with iSunshare password tool. These methods will be introduced in details for people who have encountered or are facing this problem. 1. Get Administrator password via Windows Password HintWhen we are creating our Windows system account and login password, a password hint will be asked to set up for preparation. This password hint had better can remind you, only just you of lost or forgotten password. So it couldn’t like the password, but is related to your login password. As a result, while you type a wrong password, the password hint will pops up below the password input box. Based on the password hint, you can think of your origin password.  As seen above, my password hint is email [email protected], and my Windows 8 login password is the same as the password of email. So when the password hint pops up, I will think of Windows login password instantly. 2. Get into computer with PIN code, and reset password for locked accountPIN code is a quick, convenient way to sign in to this PC by using a 4-digit code. If you have ever created one, this may be the most simplest and effective method for Windows 8 password reset. Totally two steps are needed. Step 1: Sign in with PIN code
When you forgot your local account password in the login page, sign-in options is provided for you to choose. Click the Sign-in options, there are two options, Password and PIN. Choose PIN, and input 4-digit code in the box. Then you can sign in to your computer successfully. Step 2: Press Windows +X, and click on Command Prompt (Admin) and Yes. Step 3: On the Command Prompt, type in: Net User <user name> <new password> and press Enter to reset a new password for Windows 8.  Command Prompt screen appears, input the words like the words in the red box, user name is iSunshare, new password is 12345, and then press Enter to complete the Windows password reset process.  3. Login windows 8 Via Microsoft MSN AccountIf your computer has set up to sign in to Windows 8 with Microsoft account, and you can login Windows with it, and create a PIN that any user who has a password must enter it when waking this PC, and then login with PIN code, reset password with Command Prompt. 4. Reset Windows 8 Password with Another available Admin AccountIf there is another admin account available, log on to Windows with this account first, and then reset other accounts passwords would be easy.
>> Enter Computer Management screen
Click My Computer to select Manage to enter this screen
>> Set password for account you want to reset
Click Local Users and Groups, choose Users, and right-click the account you want to reset its password to choose Set Password. 5. Reset Windows 8 password with iSunshare password toolWhen you have no password reset disk, the first and most important effort of Windows password recovery advanced tool is to create a password reset disk. How to reset Windows 8 forgotten password step by step by iSunshare Windows Genius Advanced? Follow the below steps.Step 1: Download iSunshare Windows password recovery advanced tool from iSunshare official website. Install and launch it on an accessible computer.Step 2: Create a password reset disk
Insert writable USB or CD/DVD into accessible computer and select correct media type, and then click Begin burning to burn the removable device. Until the message “Successfully burning” pops up, it means password reset disk has been created completely.
Step 3: Boot from USB or CD/DVD Setup
>> Insert the removable device to your locked computer
>> Boot your locked computer, and press DEL or F2 at the same time to enter BIOS setting screen
>> Reset removable device as the first boot device under Boot option
>> Windows password reset screen appears after all the above settingsStep 4: Reset Windows 8 forgotten password
After all the above settings, Windows password reset screen appears.
>> Select the Windows system type and the account you want to reset its password. Or you can add a new account for Windows 8.
>> Click “Reboot” to restart your computer, then you could login Windows 8 without password successfully.   Source: Reset Windows 8 Password without Disk

A few days ago, I had met the headache things that I had forgotten Windows 8 password. The login screen rejected my passwords. I was frustrated because there was very important data on my disk and I couldn’t reinstall the OS. ………….
I fortunately got to know the PCUnlocker program, which is a professional windows password recovery tool for us to reset windows 8 password instantly yet no data loss.

Hardware Requirements for a Windows Server 2012 Domain Controller.

Hi,
I have a secondary office with 10 users with a domain controller that has reached its end of life. We like to upgrade the current hardware to serve as a domain controller and potentially as an onsite file server that will sync with head office during
off peak business hours.
Any recommendations for a low cost yet reliable hardware for the above solution ?

Hi,
Thanks for your post.
I think you need to meet the requirement for upgrading to windows server 2012r2.
http://technet.microsoft.com/en-us/library/hh994618.aspx#BKMK_SysReqs
And you could refer to the following article about windows server 2012r2 domain controller configuration
Building Your First Domain Controller on 2012 R2
http://social.technet.microsoft.com/wiki/contents/articles/22622.building-your-first-domain-controller-on-2012-r2.aspx
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Upgrading windows server 2003 domain controller to windows server 2008

Hello friedns :
We have a company with about 2000 users , and two windows server 2003 domain controllers , one of them acts as a primary domain controller , and the other acts as secondary domain controller , all the FSMO s are on the primary DC ,we have decided to upgrade all of our servers from windows server 2003 to windows server 2008 , the first step is to upgrade the domain controllers to windows server 2008 , our domain controllers are so sensitive and has to be active 24 hours a day , i have stress upgrading it to windows server 2008 , what is the best solution to upgrade it with no risk ?
( i have an opinion but i am not sure and i dont have any guide about it , i want to install a windows server 2008 and promote it as an additional domain controller to the windows server 2003 DC and the transfer all the FSMOs to it , and then promote the first domain controller !!! is that possible ? if yes , is there any guide about it? )
If there is a guide available for it please let me know . (Specially if there is a tip & trick)
thank you guys.
Network is my LOVE

Hi,
This TechNet online article might be helpful for you.
How to Upgrade Domain Controllers to Windows Server 2008 or Windows Server 2008 R2
http://technet.microsoft.com/en-us/library/ee522994(WS.10).aspx
For your convenience, I have list some general steps for your reference.
Since the following operation have potential damage to Active Directory database, it is highly suggested that you'd better perform a full backup of Active Directory (System State) firstly. Also it is better to test the following procedure in a similar lab environment first.
General Steps:
=============
1. Verify the new server's TCP/IP configuration has been pointed to the current DNS server.
2. Make the new server become a member server of the current Windows Server 2003 domain first.
3. Upgrade the Windows Server 2003 forest schema to Windows Server 2008 schema with the "adprep /forestprep" command on old server.
Please run the "adprep.exe /forestprep" command from the Windows Server 2008 installation disk on the schema master. To do this, insert the Windows Server 2008 installation disk, and then type the following command:
Drive:\sources\ADPREP\adprep.exe /forestprep
4. Upgrade the Windows 2003 domain schema with the "adprep /domainprep" command on old server.
Please run the "adprep.exe /domainprep" command from the Windows Server 2008 installation disk on the infrastructure master. To do this, insert the Windows Server 2008 installation disk, and then type the following command:
Drive:\sources\ADPREP \adprep.exe /domainprep
5. Insert Windows Server 2008 Installation Disc in the new server.
6. Run "dcpromo" on new server to promote it as an additional domain controller in existing Windows 2003 domain, afterwards you may verify the installation of Active Directory.
Please refer to:
How to Verify an Active Directory Installation in Windows Server 2003
http://support.microsoft.com/kb/816106
7. Verify the new server's TCP/IP configuration has been pointed to current DNS server.
8. Enable Global Catalog on new server and manually Check Replication Topology and afterwards manually trigger replication (Replicate Now) to synchronize Active Directory database between 2 replicas.
Please note: It will some time to replicate GC between DC, please wait some time with patience.
9. Disable Global Catalog on the old DC.
10. Transfer all the FSMO roles from the old DC to the new DC.
Please refer to:
How to view and transfer FSMO roles in Windows Server 2003
http://support.microsoft.com/kb/324801
11. Verify that the old DNS Server Zone type is Active Directory-Integrated. If not, please refer to:
How To: Convert DNS Primary Server to Active Directory Integrated
http://support.microsoft.com/kb/816101
Note: Active Directory Integrated-Zone is available only if DNS server is a domain controller.
12. Install DNS component on new server and configure it as a new DNS Server (Active Directory Integrated-Zone is preferred). All the DNS configuration should be replicated to the new DNS server with Active Directory Replication.
13. Make all the clients change TCP/IP configuration to point to new server as DNS.
14. You may configure TCP/IP on all the clients, or adjust DHCP scope settings to make them use the new DNS server.
Please note: It is a good practice to make the old DC offline for several days and check whether everything works normally with the new server online. If so, you may let the old DC online and run DCPROMO to demote it.
Hope it helps.
Regards,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights.

How to reset Windows 2008 R2 Domain Controller "Administrator" password?

Similar Messages

Maybe you are looking for