Domain Controller Local Administrator Account Password Reset

In this article we will reset administrator password in windows server 2016 domain controller using following steps.

Domain controller local administrator account password reset. Insert the windows server 2016 dvd and restart the server and press f12 to boot from dvd. Some sites we have passwords some sites we don t. However it is not necessary to remember or write down dsrm passwords for all dcs. The reset active directory password option is intended for resetting domain administrator password on domain controller.

To reset the local admin account logon with the domain administrator account which should be a member of the local admin group and change the local admin password you should then be able to login with that account. The program will display a list of domain user accounts on your domain controller. The null variable assumes that the dsrm password is. Im going to try it on a test server i have here at hq and then drive over to the other site and try it out.

You can use ntdsutil exe to reset this password for the server on which you re working or for another domain controller in the domain. Choose the user account whose password you forgot then click reset password button. In the right pane right click the domain administrator account whose password you want to reset and then click reset password. Optionally you can uncheck the user must change password at next logon option if needed.

The domain user password will be changed to password123 by default. Reset the dsrm administrator password. Once done click ok and you ve successfully reset domain administrator password. The article toniur linked said you either need local admin rights or use the software listed to reset the local password then you can proceed with resetting the domain admin password.

The netdom exe tool resets the account password on the computer locally known as a local secret and writes this change to the computer s computer account object on a windows domain controller that resides in the same domain. Click start run type ntdsutil and then click ok. To reset the password on the server on which you re working type reset password on server null. Simultaneously writing the new password to both places ensures that at least the two computers involved in the operation are synchronized and starts active directory replication so that other domain controllers receive the change.

Dsrm password is specified in the process of deploying promoting a member server to a domain controller. At the ntdsutil command prompt type set dsrm password. So we choose the reset active directory password option. Enter a new password twice.

To reset the dsrm password you must logon to the domain controller of course as. At the dsrm command prompt type one of the following lines.