Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Server > Re: Change user's password then restore it from backup?

Reply
Thread Tools Display Modes

Re: Change user's password then restore it from backup?

 
 
Meinolf Weber [MVP-DS]
Guest
Posts: n/a

 
      03-22-2009
Hello Stroller,

I have another opinion as the previous posters, it is possible to restore,
not the way you described with registry editing etc.

BUT the administrative effort and the effect if something goes wrong it is
not worth it. Also some other changes maybe will be effected.

The easiest way is to go to the user, check it together with her or change
the password and give her an info about it and hand out a new password.

Here is a way:
You have to use a systemstate backup of one DC, all DC's have to be in sync,
which has the the CURRENT user password stored, so not an old systemstate
backup. Then you can change the password and do your work.

Then delete the user account from the user, wait/check for replication to
all DC's and restore the user account fro the ststemstate backup.

http://support.microsoft.com/kb/840001

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi there,
>
> One of a client's staff has a problem with Outlook. The office is on a
> domain using Windows 2003 SBS.
>
> I'd like to use RDC to logon to her machine as her user and see what's
> up. I don't know her password, but as a domain administrator I can
> change it (in Server Management > Users, then right-click).
>
> But if I change her password it means that I have to get her new
> password to her by 9am on Monday, and I'd just prefer not to have to
> give it to one of the other staff. I mean, of course I can force her
> to change it again afterwards, but it's bugging me thinking that there
> must be an alternative.
>
> In Linux I can copy the hash of the password out of /etc/shadow (or
> just copy the whole file), change the password then do my work before
> copying it back again.
>
> Is it possible to do the same thing on a Windows domain controller,
> please?
>
> I don't really want to back up & restore the whole registry, but it
> seems to
> me that I ought to be able to search the appropriate part of the
> registry
> (using regedit) for the username and there should be a key nearby for
> the
> user's password. The password will be hashed, but I can copy it to a
> textfile, change the user's password in Server Management and then
> change
> it back after I've finished my work by copying from the textfile to
> the
> registry. This should restore her password to what it was originally,
> and
> then she can log on normally using her original password with no
> disruption.
> Anyone done this? Or see any problems?
>
> What is the registry key that holds the hashed user password, please?
>
> My Google-Fu isn't good enough to find if this technique is
> documented.
>
> Thanks in advance for any pointers,
>
> Stroller.
>



 
Reply With Quote
 
 
 
 
Pegasus [MVP]
Guest
Posts: n/a

 
      03-22-2009

"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news: .com...
> Hello Stroller,
>
> I have another opinion as the previous posters, it is possible to restore,
> not the way you described with registry editing etc.
>
> BUT the administrative effort and the effect if something goes wrong it is
> not worth it. Also some other changes maybe will be effected.
>
> The easiest way is to go to the user, check it together with her or change
> the password and give her an info about it and hand out a new password.
>
> Here is a way:
> You have to use a systemstate backup of one DC, all DC's have to be in
> sync, which has the the CURRENT user password stored, so not an old
> systemstate backup. Then you can change the password and do your work.
>
> Then delete the user account from the user, wait/check for replication to
> all DC's and restore the user account fro the ststemstate backup.
>
> http://support.microsoft.com/kb/840001
>
> Best regards
>
> Meinolf Weber


What an elaborate caper - but it would work if carried out with care!


 
Reply With Quote
 
Lanwench [MVP - Exchange]
Guest
Posts: n/a

 
      03-22-2009
Pegasus [MVP] <> wrote:
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news: .com...
>> Hello Stroller,
>>
>> I have another opinion as the previous posters, it is possible to
>> restore, not the way you described with registry editing etc.
>>
>> BUT the administrative effort and the effect if something goes wrong
>> it is not worth it. Also some other changes maybe will be effected.
>>
>> The easiest way is to go to the user, check it together with her or
>> change the password and give her an info about it and hand out a new
>> password. Here is a way:
>> You have to use a systemstate backup of one DC, all DC's have to be
>> in sync, which has the the CURRENT user password stored, so not an
>> old systemstate backup. Then you can change the password and do your
>> work. Then delete the user account from the user, wait/check for
>> replication to all DC's and restore the user account fro the
>> ststemstate backup. http://support.microsoft.com/kb/840001
>>
>> Best regards
>>
>> Meinolf Weber

>
> What an elaborate caper - but it would work if carried out with care!


Whew - and better still, it would be best avoided by just telling the user
their new temporary password. That way the user also knows you logged in as
them to work on their computer, which is as it should be.


 
Reply With Quote
 
Meinolf Weber [MVP-DS]
Guest
Posts: n/a

 
      03-23-2009
Hello Lanwench [MVP - Exchange],

I fully agree with you about. Just wanted to mention that there is a way.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Pegasus [MVP] <> wrote:
>
>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>> news: .com...
>>
>>> Hello Stroller,
>>>
>>> I have another opinion as the previous posters, it is possible to
>>> restore, not the way you described with registry editing etc.
>>>
>>> BUT the administrative effort and the effect if something goes wrong
>>> it is not worth it. Also some other changes maybe will be effected.
>>>
>>> The easiest way is to go to the user, check it together with her or
>>> change the password and give her an info about it and hand out a new
>>> password. Here is a way:
>>> You have to use a systemstate backup of one DC, all DC's have to be
>>> in sync, which has the the CURRENT user password stored, so not an
>>> old systemstate backup. Then you can change the password and do your
>>> work. Then delete the user account from the user, wait/check for
>>> replication to all DC's and restore the user account fro the
>>> ststemstate backup. http://support.microsoft.com/kb/840001
>>> Best regards
>>>
>>> Meinolf Weber
>>>

>> What an elaborate caper - but it would work if carried out with care!
>>

> Whew - and better still, it would be best avoided by just telling the
> user their new temporary password. That way the user also knows you
> logged in as them to work on their computer, which is as it should be.
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Re: backup tape ejects early SuperGumby [SBS MVP] Windows Server 7 07-23-2008 08:40 PM
Re: backup tape ejects early Hank Arnold (MVP) Windows Server 0 07-23-2008 09:30 AM
Domain Users are forced to change password at login Marwan Windows Server 2 12-28-2007 01:24 PM
Re: Users change password Danny Sanders Windows Server 3 04-24-2007 07:29 PM
Patition resizing software - opinions - Bobb - Windows 64 Bit 41 07-02-2006 02:23 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59