Reset Administrator Password

[M.Siler]

I'm needing to reset the administrator password on my servers. I have three
servers in an active/passive configuration. Two of them are domain
controlers. Is there anything in cluster administrator that I need to update
or reset after I change the admin password? Or is there anything else I
need to be aware of??

I've never changed my admin password.

Thanks,
Mark

[Ryan Sokolowski [MVP]]

Do you mean changing the cluster service account password? If so, you want
this article:

How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813

You should not cluster DCs. Additionally, if 2 of your 3 cluster nodes are
DCs, they no longer have a Local Users and Groups option - i.e.: no Local
Administrator Account password to change.
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP


This posting is provided "AS IS" with no warranties, and confers no rights.

Post by M.Siler
I'm needing to reset the administrator password on my servers. I have
three servers in an active/passive configuration. Two of them are domain
controlers. Is there anything in cluster administrator that I need to
update or reset after I change the admin password? Or is there anything
else I need to be aware of??
I've never changed my admin password.
Thanks,
Mark

[M.Siler]

I didn't setup them up... Yes. Three clusters. Two of the Three are
active/passive. You know when you login the server as administrator...
that's the password I need to change. I was not aware there was a cluster
service account password. I'll check out the article you referenced.

Post by Ryan Sokolowski [MVP]
Do you mean changing the cluster service account password? If so, you
How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813
You should not cluster DCs. Additionally, if 2 of your 3 cluster nodes
are DCs, they no longer have a Local Users and Groups option - i.e.: no
Local Administrator Account password to change.
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by M.Siler
I'm needing to reset the administrator password on my servers. I have
three servers in an active/passive configuration. Two of them are domain
controlers. Is there anything in cluster administrator that I need to
update or reset after I change the admin password? Or is there anything
else I need to be aware of??
I've never changed my admin password.
Thanks,
Mark

[M W]

Hello M.Siler,

If I were you I'd check to see if the cluster service is running as the Administrator
account just in case. Just go to the services management console and check
the service properties. Be careful not to change anything while checking!

HTH

Post by M.Siler
I didn't setup them up... Yes. Three clusters. Two of the Three are
active/passive. You know when you login the server as
administrator... that's the password I need to change. I was not
aware there was a cluster service account password. I'll check out the
article you referenced.

Post by Ryan Sokolowski [MVP]
Do you mean changing the cluster service account password? If so,
How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813
You should not cluster DCs. Additionally, if 2 of your 3 cluster
nodes are DCs, they no longer have a Local Users and Groups option -
i.e.: no Local Administrator Account password to change.
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by M.Siler
I'm needing to reset the administrator password on my servers. I
have three servers in an active/passive configuration. Two of them
are domain controlers. Is there anything in cluster administrator
that I need to update or reset after I change the admin password?
Or is there anything else I need to be aware of??
I've never changed my admin password.
Thanks,
Mark

[Edwin vMierlo [MVP]]

I would disagree with running under Administrator.

I would not run my cluster service on the actual local.administrator, nor
would I run my cluster service on the domain.administrator accounts.

I would run my cluster service in an account which is a domain user, but
added to the local Administrators group of the nodes.

rgds,
edwin.

Post by M W
Hello M.Siler,
If I were you I'd check to see if the cluster service is running as the Administrator
account just in case. Just go to the services management console and check
the service properties. Be careful not to change anything while checking!
HTH

Post by M.Siler
I didn't setup them up... Yes. Three clusters. Two of the Three are
active/passive. You know when you login the server as
administrator... that's the password I need to change. I was not
aware there was a cluster service account password. I'll check out the
article you referenced.

Post by Ryan Sokolowski [MVP]
Do you mean changing the cluster service account password? If so,
How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813
You should not cluster DCs. Additionally, if 2 of your 3 cluster
nodes are DCs, they no longer have a Local Users and Groups option -
i.e.: no Local Administrator Account password to change.
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by M.Siler
I'm needing to reset the administrator password on my servers. I
have three servers in an active/passive configuration. Two of them
are domain controlers. Is there anything in cluster administrator
that I need to update or reset after I change the admin password?
Or is there anything else I need to be aware of??
I've never changed my admin password.
Thanks,
Mark

[Chuck [MSFT]]

Agreed.
--
Chuck Timon, Jr.
Microsoft Corporation
Windows Server 2008 Readiness Team
This posting is provided 'AS IS" with no warranties, and confers no rights.

Post by Edwin vMierlo [MVP]
I would disagree with running under Administrator.
I would not run my cluster service on the actual local.administrator, nor
would I run my cluster service on the domain.administrator accounts.
I would run my cluster service in an account which is a domain user, but
added to the local Administrators group of the nodes.
rgds,
edwin.

Post by M W
Hello M.Siler,
If I were you I'd check to see if the cluster service is running as the

Administrator

Post by M W
account just in case. Just go to the services management console and check
the service properties. Be careful not to change anything while checking!
HTH

Post by M.Siler
I didn't setup them up... Yes. Three clusters. Two of the Three are
active/passive. You know when you login the server as
administrator... that's the password I need to change. I was not
aware there was a cluster service account password. I'll check out the
article you referenced.

Post by Ryan Sokolowski [MVP]
Do you mean changing the cluster service account password? If so,
How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813
You should not cluster DCs. Additionally, if 2 of your 3 cluster
nodes are DCs, they no longer have a Local Users and Groups option -
i.e.: no Local Administrator Account password to change.
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by M.Siler
I'm needing to reset the administrator password on my servers. I
have three servers in an active/passive configuration. Two of them
are domain controlers. Is there anything in cluster administrator
that I need to update or reset after I change the admin password?
Or is there anything else I need to be aware of??
I've never changed my admin password.
Thanks,
Mark

[Rodney R. Fournier [MVP]]

Strongly agreed!

Cheers,

Rodney R. Fournier

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner

Post by Chuck [MSFT]
Agreed.
--
Chuck Timon, Jr.
Microsoft Corporation
Windows Server 2008 Readiness Team
This posting is provided 'AS IS" with no warranties, and confers no rights.

Post by Edwin vMierlo [MVP]
I would disagree with running under Administrator.
I would not run my cluster service on the actual local.administrator, nor
would I run my cluster service on the domain.administrator accounts.
I would run my cluster service in an account which is a domain user, but
added to the local Administrators group of the nodes.
rgds,
edwin.

Post by M W
Hello M.Siler,
If I were you I'd check to see if the cluster service is running as the

Administrator

Post by M W
account just in case. Just go to the services management console and check
the service properties. Be careful not to change anything while checking!
HTH

Post by M.Siler
I didn't setup them up... Yes. Three clusters. Two of the Three are
active/passive. You know when you login the server as
administrator... that's the password I need to change. I was not
aware there was a cluster service account password. I'll check out the
article you referenced.

Post by Ryan Sokolowski [MVP]
Do you mean changing the cluster service account password? If so,
How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813
You should not cluster DCs. Additionally, if 2 of your 3 cluster
nodes are DCs, they no longer have a Local Users and Groups option -
i.e.: no Local Administrator Account password to change.
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by M.Siler
I'm needing to reset the administrator password on my servers. I
have three servers in an active/passive configuration. Two of them
are domain controlers. Is there anything in cluster administrator
that I need to update or reset after I change the admin password?
Or is there anything else I need to be aware of??
I've never changed my admin password.
Thanks,
Mark

[M W]

Hello Edwin vMierlo [MVP],

Just for clarity I was not encouraging the OP to run cluster services as
the domain administrator. From his posts I assumed he was not very experienced
with cluster services and gathered that he probably hadnt administered Windows
servers much. I dont know whether he actively uses least privilege model
for his service accounts.

Yes I could have posted links to http://support.microsoft.com/kb/269229 to
ensure the service account had sufficient rights on the local server and
also to the computer account objects in AD. The plan was to drip feed.

Post by Edwin vMierlo [MVP]
I would disagree with running under Administrator.
I would not run my cluster service on the actual local.administrator,
nor would I run my cluster service on the domain.administrator
accounts.
I would run my cluster service in an account which is a domain user,
but added to the local Administrators group of the nodes.
rgds,
edwin.

Post by M W
Hello M.Siler,
If I were you I'd check to see if the cluster service is running as
the

Administrator

Post by M W
account just in case. Just go to the services management console and
check the service properties. Be careful not to change anything while
checking!
HTH

Post by M.Siler
I didn't setup them up... Yes. Three clusters. Two of the Three are
active/passive. You know when you login the server as
administrator... that's the password I need to change. I was not
aware there was a cluster service account password. I'll check out
the article you referenced.

Post by Ryan Sokolowski [MVP]
Do you mean changing the cluster service account password? If so,
How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813
You should not cluster DCs. Additionally, if 2 of your 3 cluster
nodes are DCs, they no longer have a Local Users and Groups option
- i.e.: no Local Administrator Account password to change.
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by M.Siler
I'm needing to reset the administrator password on my servers. I
have three servers in an active/passive configuration. Two of them
are domain controlers. Is there anything in cluster administrator
that I need to update or reset after I change the admin password?
Or is there anything else I need to be aware of??
I've never changed my admin password.
Thanks,
Mark

[Russ Kaufmann [MVP]]

Post by M W
Hello Edwin vMierlo [MVP],
Just for clarity I was not encouraging the OP to run cluster services as
the domain administrator. From his posts I assumed he was not very
experienced with cluster services and gathered that he probably hadnt
administered Windows servers much. I dont know whether he actively uses
least privilege model for his service accounts.
Yes I could have posted links to http://support.microsoft.com/kb/269229 to
ensure the service account had sufficient rights on the local server and
also to the computer account objects in AD. The plan was to drip feed.

Why would you "drip feed" instead of providing the best answer possible? I
am confused.
--
Russ Kaufmann
MVP - Windows Server - Clustering
ClusterHelp.com, a Microsoft Certified Gold Partner
Web http://www.clusterhelp.com
Blog http://msmvps.com/clusterhelp

The next ClusterHelp classes are:
July 10-13 in Denver
July 16-19 in New York

[mat]

If I started writing in detail what he should do, the post would have been
longer and would be more time consuming. I wanted to ensure there was no
impact by him changing the password and just wanted to check if he was
running as admin first before giving instructions for changing the password
using cluster.exe commands. On hindsight I probably should have posted the
whole thing as it has been more time consuming to explain the rationale.

My apologies for not doing a good job the 1st time round.

Sincerely

Post by Russ Kaufmann [MVP]

Post by M W
Hello Edwin vMierlo [MVP],
Just for clarity I was not encouraging the OP to run cluster services as
the domain administrator. From his posts I assumed he was not very
experienced with cluster services and gathered that he probably hadnt
administered Windows servers much. I dont know whether he actively uses
least privilege model for his service accounts.
Yes I could have posted links to http://support.microsoft.com/kb/269229 to
ensure the service account had sufficient rights on the local server and
also to the computer account objects in AD. The plan was to drip feed.

Why would you "drip feed" instead of providing the best answer possible? I
am confused.
--
Russ Kaufmann
MVP - Windows Server - Clustering
ClusterHelp.com, a Microsoft Certified Gold Partner
Web http://www.clusterhelp.com
Blog http://msmvps.com/clusterhelp
July 10-13 in Denver
July 16-19 in New York

[Russ Kaufmann [MVP]]

Post by mat
If I started writing in detail what he should do, the post would have been
longer and would be more time consuming.

and thus, worth something...

An incomplete answer is not valuable to those needing help.
--
Russ Kaufmann
MVP - Windows Server - Clustering
ClusterHelp.com, a Microsoft Certified Gold Partner
Web http://www.clusterhelp.com
Blog http://msmvps.com/clusterhelp

The next ClusterHelp classes are:
July 10-13 in Denver
July 16-19 in New York

[mat]

I agree completely. My apologies again. I will try not to post half baked
posts the next time ;-)

Sincerely

Post by Russ Kaufmann [MVP]

Post by mat
If I started writing in detail what he should do, the post would have been
longer and would be more time consuming.

and thus, worth something...
An incomplete answer is not valuable to those needing help.
--
Russ Kaufmann
MVP - Windows Server - Clustering
ClusterHelp.com, a Microsoft Certified Gold Partner
Web http://www.clusterhelp.com
Blog http://msmvps.com/clusterhelp
July 10-13 in Denver
July 16-19 in New York

[Rodney R. Fournier [MVP]]

WOW! If two are DC's they don't have a local Admin Password, it would be a
Domain Admin password. Neither Admins account will affect the cluster. So
change away. You should be aware that all nodes should look exactly alike
and that clustering a DC is NEVER a good idea. See
http://support.microsoft.com/kb/281662 for details. You really need to fix
your cluster.

Cheers,

Rodney R. Fournier

MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner

Post by M.Siler
I'm needing to reset the administrator password on my servers. I have
three servers in an active/passive configuration. Two of them are domain
controlers. Is there anything in cluster administrator that I need to
update or reset after I change the admin password? Or is there anything
else I need to be aware of??
I've never changed my admin password.
Thanks,
Mark

[Password Windows]

I have used Ainorsoft Windows Password Recovery Corporation
It helped me recover my Windows Server 2008 domain password conveniently and safely!

Post by M.Siler
I'm needing to reset the administrator password on my servers. I have three
servers in an active/passive configuration. Two of them are domain
controlers. Is there anything in cluster administrator that I need to update
or reset after I change the admin password? Or is there anything else I
need to be aware of??
I've never changed my admin password.
Thanks,
Mark

Post by Ryan Sokolowski [MVP]
Do you mean changing the cluster service account password? If so, you want
How to change the Cluster service account password
http://support.microsoft.com/default.aspx/kb/305813
You should not cluster DCs. Additionally, if 2 of your 3 cluster nodes are
DCs, they no longer have a Local Users and Groups option - i.e.: no Local
Administrator Account password to change.
--
Ryan Sokolowski
MVP - Windows Server - Clustering
MCSE, CCNA, CCDA, BCFP
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by M.Siler
I didn't setup them up... Yes. Three clusters. Two of the Three are
active/passive. You know when you login the server as administrator...
that's the password I need to change. I was not aware there was a cluster
service account password. I'll check out the article you referenced.

Post by Rodney R. Fournier [MVP]
WOW! If two are DC's they don't have a local Admin Password, it would be a
Domain Admin password. Neither Admins account will affect the cluster. So
change away. You should be aware that all nodes should look exactly alike
and that clustering a DC is NEVER a good idea. See
http://support.microsoft.com/kb/281662 for details. You really need to fix
your cluster.
Cheers,
Rodney R. Fournier
MVP - Windows Server - Clustering
http://www.nw-america.com - Clustering Website
http://msmvps.com/clustering - Blog
http://www.clusterhelp.com - Cluster Training
ClusterHelp.com is a Microsoft Certified Gold Partner

Post by mat
If I started writing in detail what he should do, the post would have been
longer and would be more time consuming. I wanted to ensure there was no
impact by him changing the password and just wanted to check if he was
running as admin first before giving instructions for changing the password
using cluster.exe commands. On hindsight I probably should have posted the
whole thing as it has been more time consuming to explain the rationale.
My apologies for not doing a good job the 1st time round.
Sincerely

Post by Russ Kaufmann [MVP]
and thus, worth something...
An incomplete answer is not valuable to those needing help.
--
Russ Kaufmann
MVP - Windows Server - Clustering
ClusterHelp.com, a Microsoft Certified Gold Partner
Web http://www.clusterhelp.com
Blog http://msmvps.com/clusterhelp
July 10-13 in Denver
July 16-19 in New York

Post by mat
I agree completely. My apologies again. I will try not to post half baked
posts the next time ;-)
Sincerely
Submitted via EggHeadCafe
Obsessive Defragmentation Disorder (ODD) and You
http://www.eggheadcafe.com/tutorials/aspnet/b5f241d0-4e5d-44f9-aad9-78211fdea4df/obsessive-defragmentation-disorder-odd-and-you.aspx

[b***@gmail.com]

Post by M.Siler
I'm needing to reset the administrator password on my servers. I have three
servers in an active/passive configuration. Two of them are domain
controlers. Is there anything in cluster administrator that I need to update
or reset after I change the admin password? Or is there anything else I
need to be aware of??
I've never changed my admin password.
Thanks,
Naiha