Home All Groups Group Topic Archive Search About

Way to enable a username w/o admin rights? Figure out who is admin

Author
23 Mar 2009 6:34 AM
ghurty
We had an issue with a domain admin having to be fired due to illegal
activity.
We did not have any domain admin passwords, but all was not lost due to the
help from here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windows.server.active_directory&tid=0dec8386-7330-49ff-922c-4689e234ea66&cat=en_US_09e458e2-5a48-4d89-a40f-847f472bc08e&lang=en&cr=US&sloc=&p=1

However, we almost still had issues. The Domain Admin had disabled the
username Administrator. The only way we were able to get back in, was that
someone remembered the username that the Domain Admin had used.

If we had not figured out the username, was there a way to re enable the
Administrator username without having Domain Admin rights? Or is there a way
to get the usernames of who is an Administrator on the domain?
Thanks

Author
23 Mar 2009 8:09 AM
Meinolf Weber [MVP-DS]
Hello ghurty,

Check this articles about domain admin account:
http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003_ad.htm

Install the adminpak on a client machine and check the members in the groups
"Administrators", "Domain administrators" and "Enterprise administrators"

Any user is able to view by default with AD UC.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Show quoteHide quote
> We had an issue with a domain admin having to be fired due to illegal
> activity. We did not have any domain admin passwords, but all was not
> lost due to the help from here:
>
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=
> microsoft.public.windows.server.active_directory&tid=0dec8386-7330-49f
> f-922c-4689e234ea66&cat=en_US_09e458e2-5a48-4d89-a40f-847f472bc08e&lan
> g=en&cr=US&sloc=&p=1
>
> However, we almost still had issues. The Domain Admin had disabled the
> username Administrator. The only way we were able to get back in, was
> that someone remembered the username that the Domain Admin had used.
>
> If we had not figured out the username, was there a way to re enable
> the Administrator username without having Domain Admin rights? Or is
> there a way to get the usernames of who is an Administrator on the
> domain? Thanks
>