Reset Administrator Password

Discussion in 'Clustering' started by M.Siler, Jun 12, 2007.

  1. M.Siler

    M.Siler Guest

    I'm needing to reset the administrator password on my servers. I have three
    servers in an active/passive configuration. Two of them are domain
    controlers. Is there anything in cluster administrator that I need to update
    or reset after I change the admin password? Or is there anything else I
    need to be aware of??

    I've never changed my admin password.

    Thanks,
    Mark
     
    M.Siler, Jun 12, 2007
    #1
    1. Advertisements

  2. Do you mean changing the cluster service account password? If so, you want
    this article:

    How to change the Cluster service account password
    http://support.microsoft.com/default.aspx/kb/305813

    You should not cluster DCs. Additionally, if 2 of your 3 cluster nodes are
    DCs, they no longer have a Local Users and Groups option - i.e.: no Local
    Administrator Account password to change.

    --
    Ryan Sokolowski
    MVP - Windows Server - Clustering
    MCSE, CCNA, CCDA, BCFP


    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Ryan Sokolowski [MVP], Jun 12, 2007
    #2
    1. Advertisements

  3. M.Siler

    M.Siler Guest

    I didn't setup them up... Yes. Three clusters. Two of the Three are
    active/passive. You know when you login the server as administrator...
    that's the password I need to change. I was not aware there was a cluster
    service account password. I'll check out the article you referenced.
     
    M.Siler, Jun 12, 2007
    #3
  4. WOW! If two are DC's they don't have a local Admin Password, it would be a
    Domain Admin password. Neither Admins account will affect the cluster. So
    change away. You should be aware that all nodes should look exactly alike
    and that clustering a DC is NEVER a good idea. See
    http://support.microsoft.com/kb/281662 for details. You really need to fix
    your cluster.

    Cheers,

    Rodney R. Fournier

    MVP - Windows Server - Clustering
    http://www.nw-america.com - Clustering Website
    http://msmvps.com/clustering - Blog
    http://www.clusterhelp.com - Cluster Training
    ClusterHelp.com is a Microsoft Certified Gold Partner
     
    Rodney R. Fournier [MVP], Jun 13, 2007
    #4
  5. M.Siler

    M W Guest

    Hello M.Siler,

    If I were you I'd check to see if the cluster service is running as the Administrator
    account just in case. Just go to the services management console and check
    the service properties. Be careful not to change anything while checking!

    HTH

    M@
     
    M W, Jun 17, 2007
    #5
  6. I would disagree with running under Administrator.

    I would not run my cluster service on the actual local.administrator, nor
    would I run my cluster service on the domain.administrator accounts.

    I would run my cluster service in an account which is a domain user, but
    added to the local Administrators group of the nodes.

    rgds,
    edwin.
     
    Edwin vMierlo [MVP], Jun 18, 2007
    #6
  7. M.Siler

    Chuck [MSFT] Guest

    Agreed.

    --
    Chuck Timon, Jr.
    Microsoft Corporation
    Windows Server 2008 Readiness Team
    This posting is provided 'AS IS" with no warranties, and confers no rights.
     
    Chuck [MSFT], Jun 18, 2007
    #7
  8. Rodney R. Fournier [MVP], Jun 18, 2007
    #8
  9. M.Siler

    M W Guest

    Hello Edwin vMierlo [MVP],

    Just for clarity I was not encouraging the OP to run cluster services as
    the domain administrator. From his posts I assumed he was not very experienced
    with cluster services and gathered that he probably hadnt administered Windows
    servers much. I dont know whether he actively uses least privilege model
    for his service accounts.

    Yes I could have posted links to http://support.microsoft.com/kb/269229 to
    ensure the service account had sufficient rights on the local server and
    also to the computer account objects in AD. The plan was to drip feed.

    M@
     
    M W, Jun 18, 2007
    #9
  10. Why would you "drip feed" instead of providing the best answer possible? I
    am confused.


    --
    Russ Kaufmann
    MVP - Windows Server - Clustering
    ClusterHelp.com, a Microsoft Certified Gold Partner
    Web http://www.clusterhelp.com
    Blog http://msmvps.com/clusterhelp

    The next ClusterHelp classes are:
    July 10-13 in Denver
    July 16-19 in New York
     
    Russ Kaufmann [MVP], Jun 18, 2007
    #10
  11. M.Siler

    mat Guest

    If I started writing in detail what he should do, the post would have been
    longer and would be more time consuming. I wanted to ensure there was no
    impact by him changing the password and just wanted to check if he was
    running as admin first before giving instructions for changing the password
    using cluster.exe commands. On hindsight I probably should have posted the
    whole thing as it has been more time consuming to explain the rationale.

    My apologies for not doing a good job the 1st time round.

    Sincerely

    M@
     
    mat, Jun 19, 2007
    #11
  12. and thus, worth something...

    An incomplete answer is not valuable to those needing help.


    --
    Russ Kaufmann
    MVP - Windows Server - Clustering
    ClusterHelp.com, a Microsoft Certified Gold Partner
    Web http://www.clusterhelp.com
    Blog http://msmvps.com/clusterhelp

    The next ClusterHelp classes are:
    July 10-13 in Denver
    July 16-19 in New York
     
    Russ Kaufmann [MVP], Jun 19, 2007
    #12
  13. M.Siler

    mat Guest

    I agree completely. My apologies again. I will try not to post half baked
    posts the next time ;-)

    Sincerely
    M@
     
    mat, Jun 19, 2007
    #13
  14. I have used Ainorsoft Windows Password Recovery Corporation
    It helped me recover my Windows Server 2008 domain password conveniently and safely!
     
    Password Windows, Mar 7, 2011
    #14
  15.  
    barrierashafiq, Feb 21, 2014
    #15
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.