Reset Administrator Password

I'm needing to reset the administrator password on my servers. I have three
servers in an active/passive configuration. Two of them are domain
controlers. Is there anything in cluster administrator that I need to update
or reset after I change the admin password? Or is there anything else I
need to be aware of??

I've never changed my admin password.

Thanks,
Mark

Do you mean changing the cluster service account password? If so, you want
this article:

How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813

You should not cluster DCs. Additionally, if 2 of your 3 cluster nodes are
DCs, they no longer have a Local Users and Groups option - i.e.: no Local
Administrator Account password to change.

--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP


This posting is provided "AS IS" with no warranties, and confers no rights.
"M.Siler" <> wrote in message
news:%231$...
> I'm needing to reset the administrator password on my servers. I have
> three servers in an active/passive configuration. Two of them are domain
> controlers. Is there anything in cluster administrator that I need to
> update or reset after I change the admin password? Or is there anything
> else I need to be aware of??
>
> I've never changed my admin password.
>
> Thanks,
> Mark
>

I didn't setup them up... Yes. Three clusters. Two of the Three are
active/passive. You know when you login the server as administrator...
that's the password I need to change. I was not aware there was a cluster
service account password. I'll check out the article you referenced.

"Ryan Sokolowski [MVP]" <> wrote in message
news:...
> Do you mean changing the cluster service account password? If so, you
> want this article:
>
> How to change the Cluster service account password
> http://support.microsoft.com/default.aspx/kb/305813
>
> You should not cluster DCs. Additionally, if 2 of your 3 cluster nodes
> are DCs, they no longer have a Local Users and Groups option - i.e.: no
> Local Administrator Account password to change.
>
> --
> Ryan Sokolowski
> MVP - Windows Server - Clustering
> MCSE, CCNA, CCDA, BCFP
>
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> "M.Siler" <> wrote in message
> news:%231$...
>> I'm needing to reset the administrator password on my servers. I have
>> three servers in an active/passive configuration. Two of them are domain
>> controlers. Is there anything in cluster administrator that I need to
>> update or reset after I change the admin password? Or is there anything
>> else I need to be aware of??
>>
>> I've never changed my admin password.
>>
>> Thanks,
>> Mark
>>
>
>

WOW! If two are DC's they don't have a local Admin Password, it would be a
Domain Admin password. Neither Admins account will affect the cluster. So
change away. You should be aware that all nodes should look exactly alike
and that clustering a DC is NEVER a good idea. See
http://support.microsoft.com/kb/281662 for details. You really need to fix
your cluster.

Cheers,

Rodney R. Fournier

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner


"M.Siler" <> wrote in message
news:%231$...
> I'm needing to reset the administrator password on my servers. I have
> three servers in an active/passive configuration. Two of them are domain
> controlers. Is there anything in cluster administrator that I need to
> update or reset after I change the admin password? Or is there anything
> else I need to be aware of??
>
> I've never changed my admin password.
>
> Thanks,
> Mark
>

Hello M.Siler,

If I were you I'd check to see if the cluster service is running as the Administrator
account just in case. Just go to the services management console and check
the service properties. Be careful not to change anything while checking!

HTH

M@

> I didn't setup them up... Yes. Three clusters. Two of the Three are
> active/passive. You know when you login the server as
> administrator... that's the password I need to change. I was not
> aware there was a cluster service account password. I'll check out the
> article you referenced.
>
> "Ryan Sokolowski [MVP]" <> wrote in message
> news:...
>
>> Do you mean changing the cluster service account password? If so,
>> you want this article:
>>
>> How to change the Cluster service account password
>> http://support.microsoft.com/default.aspx/kb/305813
>>
>> You should not cluster DCs. Additionally, if 2 of your 3 cluster
>> nodes are DCs, they no longer have a Local Users and Groups option -
>> i.e.: no Local Administrator Account password to change.
>>
>> --
>> Ryan Sokolowski
>> MVP - Windows Server - Clustering
>> MCSE, CCNA, CCDA, BCFP
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> "M.Siler" <> wrote in message
>> news:%231$...
>>> I'm needing to reset the administrator password on my servers. I
>>> have three servers in an active/passive configuration. Two of them
>>> are domain controlers. Is there anything in cluster administrator
>>> that I need to update or reset after I change the admin password?
>>> Or is there anything else I need to be aware of??
>>>
>>> I've never changed my admin password.
>>>
>>> Thanks,
>>> Mark

I would disagree with running under Administrator.

I would not run my cluster service on the actual local.administrator, nor
would I run my cluster service on the domain.administrator accounts.

I would run my cluster service in an account which is a domain user, but
added to the local Administrators group of the nodes.

rgds,
edwin.


"M W" <matheesha@ugh!spam.gmail.com> wrote in message
news:. com...
> Hello M.Siler,
>
> If I were you I'd check to see if the cluster service is running as the
Administrator
> account just in case. Just go to the services management console and check
> the service properties. Be careful not to change anything while checking!
>
> HTH
>
> M@
>
> > I didn't setup them up... Yes. Three clusters. Two of the Three are
> > active/passive. You know when you login the server as
> > administrator... that's the password I need to change. I was not
> > aware there was a cluster service account password. I'll check out the
> > article you referenced.
> >
> > "Ryan Sokolowski [MVP]" <> wrote in message
> > news:...
> >
> >> Do you mean changing the cluster service account password? If so,
> >> you want this article:
> >>
> >> How to change the Cluster service account password
> >> http://support.microsoft.com/default.aspx/kb/305813
> >>
> >> You should not cluster DCs. Additionally, if 2 of your 3 cluster
> >> nodes are DCs, they no longer have a Local Users and Groups option -
> >> i.e.: no Local Administrator Account password to change.
> >>
> >> --
> >> Ryan Sokolowski
> >> MVP - Windows Server - Clustering
> >> MCSE, CCNA, CCDA, BCFP
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >> "M.Siler" <> wrote in message
> >> news:%231$...
> >>> I'm needing to reset the administrator password on my servers. I
> >>> have three servers in an active/passive configuration. Two of them
> >>> are domain controlers. Is there anything in cluster administrator
> >>> that I need to update or reset after I change the admin password?
> >>> Or is there anything else I need to be aware of??
> >>>
> >>> I've never changed my admin password.
> >>>
> >>> Thanks,
> >>> Mark
>
>

Agreed.

--
Chuck Timon, Jr.
Microsoft Corporation
Windows Server 2008 Readiness Team
This posting is provided 'AS IS" with no warranties, and confers no rights.

"Edwin vMierlo [MVP]" <> wrote in
message news:%...
>I would disagree with running under Administrator.
>
> I would not run my cluster service on the actual local.administrator, nor
> would I run my cluster service on the domain.administrator accounts.
>
> I would run my cluster service in an account which is a domain user, but
> added to the local Administrators group of the nodes.
>
> rgds,
> edwin.
>
>
> "M W" <matheesha@ugh!spam.gmail.com> wrote in message
> news:. com...
>> Hello M.Siler,
>>
>> If I were you I'd check to see if the cluster service is running as the
> Administrator
>> account just in case. Just go to the services management console and
>> check
>> the service properties. Be careful not to change anything while checking!
>>
>> HTH
>>
>> M@
>>
>> > I didn't setup them up... Yes. Three clusters. Two of the Three are
>> > active/passive. You know when you login the server as
>> > administrator... that's the password I need to change. I was not
>> > aware there was a cluster service account password. I'll check out the
>> > article you referenced.
>> >
>> > "Ryan Sokolowski [MVP]" <> wrote in message
>> > news:...
>> >
>> >> Do you mean changing the cluster service account password? If so,
>> >> you want this article:
>> >>
>> >> How to change the Cluster service account password
>> >> http://support.microsoft.com/default.aspx/kb/305813
>> >>
>> >> You should not cluster DCs. Additionally, if 2 of your 3 cluster
>> >> nodes are DCs, they no longer have a Local Users and Groups option -
>> >> i.e.: no Local Administrator Account password to change.
>> >>
>> >> --
>> >> Ryan Sokolowski
>> >> MVP - Windows Server - Clustering
>> >> MCSE, CCNA, CCDA, BCFP
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >> "M.Siler" <> wrote in message
>> >> news:%231$...
>> >>> I'm needing to reset the administrator password on my servers. I
>> >>> have three servers in an active/passive configuration. Two of them
>> >>> are domain controlers. Is there anything in cluster administrator
>> >>> that I need to update or reset after I change the admin password?
>> >>> Or is there anything else I need to be aware of??
>> >>>
>> >>> I've never changed my admin password.
>> >>>
>> >>> Thanks,
>> >>> Mark
>>
>>
>
>

Strongly agreed!

Cheers,

Rodney R. Fournier

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner


"Chuck [MSFT]" <> wrote in message
news:493EF778-6309-4120-916A-...
> Agreed.
>
> --
> Chuck Timon, Jr.
> Microsoft Corporation
> Windows Server 2008 Readiness Team
> This posting is provided 'AS IS" with no warranties, and confers no
> rights.
>
> "Edwin vMierlo [MVP]" <> wrote in
> message news:%...
>>I would disagree with running under Administrator.
>>
>> I would not run my cluster service on the actual local.administrator, nor
>> would I run my cluster service on the domain.administrator accounts.
>>
>> I would run my cluster service in an account which is a domain user, but
>> added to the local Administrators group of the nodes.
>>
>> rgds,
>> edwin.
>>
>>
>> "M W" <matheesha@ugh!spam.gmail.com> wrote in message
>> news:. com...
>>> Hello M.Siler,
>>>
>>> If I were you I'd check to see if the cluster service is running as the
>> Administrator
>>> account just in case. Just go to the services management console and
>>> check
>>> the service properties. Be careful not to change anything while
>>> checking!
>>>
>>> HTH
>>>
>>> M@
>>>
>>> > I didn't setup them up... Yes. Three clusters. Two of the Three are
>>> > active/passive. You know when you login the server as
>>> > administrator... that's the password I need to change. I was not
>>> > aware there was a cluster service account password. I'll check out the
>>> > article you referenced.
>>> >
>>> > "Ryan Sokolowski [MVP]" <> wrote in message
>>> > news:...
>>> >
>>> >> Do you mean changing the cluster service account password? If so,
>>> >> you want this article:
>>> >>
>>> >> How to change the Cluster service account password
>>> >> http://support.microsoft.com/default.aspx/kb/305813
>>> >>
>>> >> You should not cluster DCs. Additionally, if 2 of your 3 cluster
>>> >> nodes are DCs, they no longer have a Local Users and Groups option -
>>> >> i.e.: no Local Administrator Account password to change.
>>> >>
>>> >> --
>>> >> Ryan Sokolowski
>>> >> MVP - Windows Server - Clustering
>>> >> MCSE, CCNA, CCDA, BCFP
>>> >> This posting is provided "AS IS" with no warranties, and confers no
>>> >> rights.
>>> >> "M.Siler" <> wrote in message
>>> >> news:%231$...
>>> >>> I'm needing to reset the administrator password on my servers. I
>>> >>> have three servers in an active/passive configuration. Two of them
>>> >>> are domain controlers. Is there anything in cluster administrator
>>> >>> that I need to update or reset after I change the admin password?
>>> >>> Or is there anything else I need to be aware of??
>>> >>>
>>> >>> I've never changed my admin password.
>>> >>>
>>> >>> Thanks,
>>> >>> Mark
>>>
>>>
>>
>>
>

Hello Edwin vMierlo [MVP],

Just for clarity I was not encouraging the OP to run cluster services as
the domain administrator. From his posts I assumed he was not very experienced
with cluster services and gathered that he probably hadnt administered Windows
servers much. I dont know whether he actively uses least privilege model
for his service accounts.

Yes I could have posted links to http://support.microsoft.com/kb/269229 to
ensure the service account had sufficient rights on the local server and
also to the computer account objects in AD. The plan was to drip feed.

M@


> I would disagree with running under Administrator.
>
> I would not run my cluster service on the actual local.administrator,
> nor would I run my cluster service on the domain.administrator
> accounts.
>
> I would run my cluster service in an account which is a domain user,
> but added to the local Administrators group of the nodes.
>
> rgds,
> edwin.
> "M W" <matheesha@ugh!spam.gmail.com> wrote in message
> news:. com...
>
>> Hello M.Siler,
>>
>> If I were you I'd check to see if the cluster service is running as
>> the
>>
> Administrator
>
>> account just in case. Just go to the services management console and
>> check the service properties. Be careful not to change anything while
>> checking!
>>
>> HTH
>>
>> M@
>>
>>> I didn't setup them up... Yes. Three clusters. Two of the Three are
>>> active/passive. You know when you login the server as
>>> administrator... that's the password I need to change. I was not
>>> aware there was a cluster service account password. I'll check out
>>> the article you referenced.
>>>
>>> "Ryan Sokolowski [MVP]" <> wrote in message
>>> news:...
>>>
>>>> Do you mean changing the cluster service account password? If so,
>>>> you want this article:
>>>>
>>>> How to change the Cluster service account password
>>>> http://support.microsoft.com/default.aspx/kb/305813
>>>>
>>>> You should not cluster DCs. Additionally, if 2 of your 3 cluster
>>>> nodes are DCs, they no longer have a Local Users and Groups option
>>>> - i.e.: no Local Administrator Account password to change.
>>>>
>>>> --
>>>> Ryan Sokolowski
>>>> MVP - Windows Server - Clustering
>>>> MCSE, CCNA, CCDA, BCFP
>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>> rights.
>>>> "M.Siler" <> wrote in message
>>>> news:%231$...
>>>>> I'm needing to reset the administrator password on my servers. I
>>>>> have three servers in an active/passive configuration. Two of them
>>>>> are domain controlers. Is there anything in cluster administrator
>>>>> that I need to update or reset after I change the admin password?
>>>>> Or is there anything else I need to be aware of??
>>>>>
>>>>> I've never changed my admin password.
>>>>>
>>>>> Thanks,
>>>>> Mark

"M W" <Matheesha@ugh!spam.gmail.company> wrote in message
news:. com...
> Hello Edwin vMierlo [MVP],
>
> Just for clarity I was not encouraging the OP to run cluster services as
> the domain administrator. From his posts I assumed he was not very
> experienced with cluster services and gathered that he probably hadnt
> administered Windows servers much. I dont know whether he actively uses
> least privilege model for his service accounts.
>
> Yes I could have posted links to http://support.microsoft.com/kb/269229 to
> ensure the service account had sufficient rights on the local server and
> also to the computer account objects in AD. The plan was to drip feed.

Why would you "drip feed" instead of providing the best answer possible? I
am confused.


--
Russ Kaufmann
MVP - Windows Server - Clustering
ClusterHelp.com, a Microsoft Certified Gold Partner
Web http://www.clusterhelp.com
Blog http://msmvps.com/clusterhelp

The next ClusterHelp classes are:
July 10-13 in Denver
July 16-19 in New York