Lock IT Down: Crack or reset lost administrator passwords with these tools

The bane of an IT professional's life is when administrator passwords are lost, stolen, or simply forgotten. For the unprepared, losing an admin password can cause extensive disruption to work flow and even business processes—not to mention the fact that it could be a potentially serious security problem. With that in mind, I'm going to explain the various approaches that can be taken when faced with this problem.

Words of warning
The methods described below are to be carried out at the administrator's risk. The products described below will often work on both Windows NT and Windows 2000, but you should read the product documentation to make sure the product will work in your environment.

Preventative maintenance
First, if you have not instituted the following basic policies for administrator password protection, then you should do so as soon as possible.

  1. The administrator account should be renamed to something obscure.
  2. No one in the IT department should be using the administrator account to carry out systems maintenance. This includes any scheduled tasks, which should run under an account with appropriate privileges.
  3. Change the current administrator password and write the new one down without telling anyone what it is (if using Windows 2000, you may have a different password for Directory Services Restoration, which also needs to be kept safe); make a second hard copy; seal each in a separate envelope; and ask your boss to put one in the company safe and the other in an offsite safe.
  4. Give requisite (granular) administrator privileges to any IT professional user account that needs them. Verify that group memberships are appropriate and don’t conflict.
  5. Forget about the administrator account until you have a real need for it, and if you can’t remember the password, then you know where to find it (based on step three).



Comments

Post a Comment

Popular posts from this blog

How to Change the Password on Microsoft Outlook

Microsoft Outlook is one of the most common business email clients. If you have recently begun work at a business that uses Microsoft Outlook, you may be wondering how to accomplish certain basic functions such as changing a password, as the menu option for doing so likely differs from the web mail account that you may be using at home. This article discusses the steps needed to change an email password in Microsoft Outlook. Step 1 Click "Tools" in Outlook, then click "Account Settings." Step 2 Click the "E-mail" tab if it is not already on top. Click the email account that you would like to change the password for, then click "Change." Step 3 Click inside the "Password" box, and type the new password for the email account. Click the "Remember password" box if you would like Outlook to remember your password. Step 4 Click the "More Settings" button if you a different password for your outgoing email serv...
Read more

Common DNS Issues

  Running into an error with the Domain Name System — simply called a DNS error — means you won't be able to get access to the internet, which is frustrating if it happens regularly. Learning the most common causes of DNS issues and the best methods for fixing them can help you get back online with minimal effort. Essentially the DNS translates the domain names we use to access websites into IP addresses, which is what your computer actually uses to access the website. In most cases, a DNS problem is easy to fix Network Problems In many cases, an error attributed to DNS could be a simple connection problem (especially if you're connecting wirelessly using a laptop) that doesn't really relate to the DNS at all. Before blaming DNS errors, go to your "Network and Sharing Center" and run the troubleshooter. This will identify and fix many common connectivity issues and can help you narrow down the cause of the issue. Duplicate IP Addresses When two devices attempt to ...
Read more

How to disable SmartScreen in Windows 10 Creators Update

Windows 10 Creators Update introduced a number of changes to the user interface, so disabling Smart Screen can be a bit confusing. In this article, we'll see how to properly disable SmartScreen in it. The SmartScreen filter is a technology which was initially designed for Internet Explorer to protect users from malicious websites and web applications. It was integrated with IE8 and IE9 (as the successor to IE7's Phishing filter). Starting with Windows 8, Microsoft implemented Internet Explorer's SmartScreen feature directly into the operating system so files are screened for being potentially harmful. SmartScreen is also integrated for Windows Store apps. If enabled, the Windows SmartScreen filter sends information about every application you download and run to Microsoft’s servers, where that information will be analyzed and compared with their malicious apps database. If Windows gets a negative feedback about the app from the server, it will prevent you from running ...
Read more