Reset Administrator Password on SBS 2008

Next post: Reset all passwords in an Active Directory OU Previous post: Managing Silverstripe Upgrades In Your SVN Projects

Posted by al on 24 April 2010 | 8 Comments

Tags: , ,

So you've managed to loose your admin password for your SBS Server 2008 eh? Well in my case, a faulty keyboard caused an incorrect password to be set. Whatever the reason you need to reset the password, I'll assume you're doing this for Good, and not Evil.

A quick google round came up with the usual password reset programs, but they only work on local passwords, not ones stored in Active Directory, so they were no good. Eventually I stumbled across the method. Credit goes here, but I like to keep useful tips on this site (more for myself than anything).

Things you'll need:

  • Physical access to the server
  • Your 2008 install DVD

Step One: Launch recovery console

Put your install DVD in the drive and reboot the server. Make sure you press the key to boot off the DVD. Once it loads, choose your language, then click Repair your computer. Click Command Prompt

Step Two: Do a bit of file jiggery-pokery

Run the following commands in the command prompt:

C:
cd windows\system32
move Utilman.exe Utilman.bak
copy Cmd.exe Utilman.exe

Basically we're moving Utilman out of the way temporarily and replacing it with cmd.exe (command prompt). Close the command prompt and click Reboot.

Step Three: Do the password reset

Start up your server as normal, and after you press CTRL-ALT-DELETE and have the login screen up, press Windows-U and the command prompt will come up. Type the following:

net user [username] [password]

Where [username] is the username you want to reset the password for, and [password] is the new password. Close the command prompt and log in with the new password!

Step Four: Close that back-door

We want to move the files back to where they were, otherwise anyone could go Windows-U to get an administrator's command prompt. Unfortunately Utilman.exe is a protected file so you can't move it back while in Windows. Reboot back into the recovery console as in Step One, and run the following commands:

C:
cd windows\system32
del Utilman.exe
move Utilman.bak Utilman.exe

All done! Reboot and pat yourself on your back.


Post your comment

Comments

Posted by roko 2 years ago

perfect! saved a lot of work

Posted by Nigel 2 years ago

The procedure worked as descrbed with all the confirmations but when reboot--login, says something about password length/complexity, not valid...???

Posted by Brendan 2 years ago

Interesting this sort of hack works on SBS 2008. a similar type of trickery (replacing the logon screensaver with a cmd.exe) was the method of choice for recovering a Server 2000 password.

Considering it requires physical access to the server, I suppose its not that much of a threat. Handy little piece of knowledge to keep in your toolkit.

Posted by Nicolas 2 years ago

Excellent !, very good tips,
works perfectly on SBS 2008

Posted by Stupid Guy 2 years ago

THANKSSS its saved me!!!

Posted by Dony 2 years ago

As far as I can say you're a lifesaver for me too! Thank you so much - and thanks the Internet!

Posted by phew! 3 years ago

that was the most stressful 10 minutes of my life. how could the sys admin forget the admin pwd! you are a life saver.

Posted by stupid-guy-who-forgot-pw 3 years ago

Thank you so much! this articled saved me.

I can confirm this works perfect with SBS 2008.

RSS feed for comments on this page | RSS feed for all comments