Would be able to obtain user passwords from the AD database?

Asked By 30 points N/A Posted on -
qa-featured

Hello Experts,

Would I be able to obtain user passwords from the AD database? I am on a slow WAN link. How can I promote my existing location to a server to DC? Is it possible to remove AD forcibly from a server? What should I do after removing it from the server? 

Thank you.

  • Answer Accepted: No
  • Question Category:
SHARE
Answered By 0 points N/A #133307

Would be able to obtain user passwords from the AD database?

qa-featured

 

Hello Grace, 

 1) You cannot get the password for an Active Directory user. That would breach the security measures of Windows.Administrator is able to reset the password, but not able to identify the current password. Also no user passwords are stored in a manner that can be retrieved.

2) Demote the server using dcpromo /forceremoval, then remove the metadata from Active directory using ndtsutil. There is no way to get user passwords from AD that I am aware of, but you should still be able to change them. 
Another way out too
Restart the DC is DSRM mode
a. Locate the following registry subkey:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlProductOptions
b. In the right-pane, double-click ProductType.
c. Type ServerNT in the Value data box, and then click OK.
Restart the server in normal mode
its a member server now but AD entries are still there. Promote the server to a fake domain say ABC.com and then remove gracefully using DCpromo. Else after restart you can also use ntdsutil to do metadata 

About Pathosy Ion
Questions
2
Answers
4
Best Answers
0
  • Posted on -
  • Question Category:

How would you explain LDAP and SYSVOL folder?

Previous

Process on Leveraging the Content Delivery Network

Next

Related Questions