Система помоги сбросить пароль на Server 2012 R2
Задача: Разобрать шаги по сбросу пароля на Windows Server 2012 R2
Итак, у меня есть установленный образ Windows Server 2012 R2 Std под Virtualbox моей основной системы ноутбука Lenovo E555 Ubuntu Trusty Desktop (рабочее окружение Gnome Classic).
Запускаю пакет управления виртуальными машинами:
Приложения — Системные утилиты — Oracle VM Virtualbox, нахожу контейнер с именем WS2012R2_#1, запускаю его и открываю свойства данной виртуальной машины чтобы смонтировать с развернутой системой установочный диск с которого сейчас нужно будет произвести запуск:
Устройства — Оптические диски — Выбрать образ диска и указываю путь до местонахождения в системе установочного образа, в моем случае: Server2012R2_EN_DV9.ISO
Затем отправляю виртуальную машину в перезагрузку
VM: WS2012R2_#1 — Машина — Перезапустить (или сочетание клавиш: Ctrl + R если окно консоли виртуальной машины открыто), в момент когда на экране появится надпись «Press any key to book from CD or DVD» нужно нажать клавишу Enter, после чего соглашаемся (нажимаем кнопку Next) с выставленными настройками установщика, такими как:
- Language to install: English (United States)
- Time and currency format: English (United States)
- Keyboard or input method: US
На следующем шаге нужно не нажимать «Install Now», а нажать «Repair your computer», см. скриншот ниже для наглядного понимания:
После входа в расширенное меню следует перейти нажав на иконку с изображением отвертки и гаечного ключа (Troubleshoot), а потом на иконку с изображением консоли командной строки (Command Prompt) и передо мной предстает запущенная консоль, как можно заменить с правами Администратора ожидающая ввода команд:
Здесь нужно ввести следующие команды аналогичные тем которые вводились в заметке по сбросу пароля на системную учетную запись в Windows Server 2008 R2, но можно и не сбрасывать пароль, а создать логин и пароль и дать административные привилегии:
X:\Sources>copy d:\Windows\System32\Utilman.exe d:\Windows\System32\Utilman.exe.backup
X:\Sources>copy d:\Windows\System32\cmd.exe d:\Windows\System32\Utilman.exe
Overwrite d:\Windows\System32\Utilman.exe? (Yes/No/All): y
Затем отключаю смонтированный инсталляционный образ Windows от контейнера с виртуальной системой:
Устройства — Оптические диски — Изъять диск из привода
Выключаю VM, закрыв открытое окно консоли командной строки и нажав на иконку «Turn off your PC»
Включаю VM, когда экран встанет на этапе нажатия сочетания клавиш: Ctrl + Alt + Del нужно нажать вот сюда (см. скриншот ниже), если не проделывалась процедура подмены исполняемого файла Utilman.exe, то ранее здесь бы запустилась утилита «Центра специальных возможностей», но т. к. я ее подменил, то запуститься консоль командной строки с правами СИСТЕМЫ, а это много больше чем административные права:
Когда такая консоль, системная консоль запущена в этот момент с системой можно делать все что угодно, создавать административного пользователя:
C:\Windows\system32\net user ekzorchik 712mbddr@ /add
C:\Windows\system32\net localgroup Administrators ekzorchik /add
Сбросил пароль на дефолтную административную учетную запись с логином Administrator:
C:\Windows\system32\net user Administrator 712mbddr@
По такому же принципу, но с использованием консольных команд можно делать с системой все что необходимо.
После того, как нужно еще раз загрузиться с установочного диск и произвести возврат utilman.exe на свое законное место, т. к. если попытаться проделать эту процедуру авторизовавшись в системе под административной учетной записью сделать этого не получиться. В доступе на такое посягательство исполняемых файлов администратору системы будет отказано от системы.
C:\Windows\system32\copy Utilman.exe.backup Utilman.exe
Overwrite Utilman.exe? (Yes/No/All): y
К чему я писал данную заметку, просто у меня несколько дней назад была история. На домен контроллере поехало время, остановилась репликация, не работала авторизация ни под какой учетной записью на домен контроллере под управлением Windows Server 2012 R2 Standard, а вот с помощью шагов выше я попал в систему через восстановление контроллера домена и восстановил контроль на инфраструктурой. На этом у меня все, с уважением автор блога Олло Александр aka ekzorchik.
Используйте прокси ((заблокировано роскомнадзором, используйте vpn или proxy)) при использовании Telegram клиента:
Поблагодари автора и новые статьи
будут появляться чаще 🙂
Карта МКБ: 4432-7300-2472-8059
Yandex-деньги: 41001520055047
Большое спасибо тем кто благодарит автора за практические заметки небольшими пожертвованиями. С уважением, Олло Александр aka ekzorchik.
Windows server 2012 забыл пароль администратора
The following forum(s) have migrated to Microsoft Q&A: All English Windows Server forums!
Visit Microsoft Q&A to post new questions.
Answered by:
Question
I just installated windows server 2012, assigned a password and wrote it down. Upon trying to sign in, I get the message that the password is wrong. How can I reset it?
Answers
To reset the password on your Windows 2012 server, simply complete the following steps:
- Boot from the Micrsoft Windows Server 2012 DVD
- From the Windows Setup menu, click “Next”.
- Select “Repair your computer”
- Under Choose and option, click on “Troubleshoot”.
- Under Advanced options, click “Command Prompt”.
- At the command prompt, run the following commands: d: cd windows\system32 ren Utilman.exe Utilman.exe.old copy cmd.exe Utilman.exe
- Close the command prompt and then click “Continue”.
- The server should now boot and present the logon screen. Here click Windows Key + U.
- At the prompt you can now change the password, by typing the following command: net user administrator Password123This will set the password for the Administrator user to be Password123 (case sensitive).
MD Disclaimer: The opinion expressed herein are my own knowledge. Deploy this at your own risk. Whenever you see a helpful reply, just click on “Propose As Answer” / “Marked As Answer” and please do «VOTE».
Title » how I reset Windows Server 2012 administrator password without installation cd»s? «
Answer — If you do not have a password, you can’t. You need the installation media.
All replies
To reset the password on your Windows 2012 server, simply complete the following steps:
- Boot from the Micrsoft Windows Server 2012 DVD
- From the Windows Setup menu, click “Next”.
- Select “Repair your computer”
- Under Choose and option, click on “Troubleshoot”.
- Under Advanced options, click “Command Prompt”.
- At the command prompt, run the following commands: d: cd windows\system32 ren Utilman.exe Utilman.exe.old copy cmd.exe Utilman.exe
- Close the command prompt and then click “Continue”.
- The server should now boot and present the logon screen. Here click Windows Key + U.
- At the prompt you can now change the password, by typing the following command: net user administrator Password123This will set the password for the Administrator user to be Password123 (case sensitive).
MD Disclaimer: The opinion expressed herein are my own knowledge. Deploy this at your own risk. Whenever you see a helpful reply, just click on “Propose As Answer” / “Marked As Answer” and please do «VOTE».
Title » how I reset Windows Server 2012 administrator password without installation cd»s? «
Answer — If you do not have a password, you can’t. You need the installation media.
at command number 6 is REM not REN , at least to me it worked
How do it with VMware DC computer
I press key window+u but it not show prompt
Did NOT work for me.
Sorry No, It’s REN (for RENAME) not REM
rem /?
Records comments (remarks) in a batch file or CONFIG.SYS.
This is valid for 2120r2
Command prompt from
USB ISO 2012r2standrad
(find system drive letter)
then you can find system32
and rename the Utilman and replace it w/ command prompt (cmd.exe)
windows key + u = opens command prompt
net user administrator «password here»
I was trying to reset password for more than a month now but had no success. Followed all the steps mentioned above and it worked.
In Command Prompt for Step 6, had to run following commands one after the other.
d:
cd windows\system32
ren Utilman.exe Utilman.exe.old
copy cmd.exe Utilman.exe
Exactly that’s what’s happening to me to i click the command prompt and it’s saying choose an account to continue the only account showing it administrator once it’s clicked it requires a password to be entered before the command prompt opens
If you just want to change your password from an RDP or VMware session, from a run or command prompt, run «OSK» for «Operating System keyboard».
This will bring up a «LOCAL» keyboard.
On your physical keyboard, hold down «Ctrl» & «Alt» and then click the «Delete» on the «Local» keyboard with your mouse.
This will bring up a «Change Password» prompt (probably need to minimize the «Local» keyboard), so just change the PW as you normally would and Robert’s your father’s brother. 🙂
This solution worked for me, but I have three notes to this answer:
- There is no utilman.exe in Server Core version, so you can skip then ren command and simply use copy cmd.exe utilman.exe (after selecting the System32 folder, of course).
- If you are running Windows Server in a Hyper-V guest, you can simply stop your VM, attach your .VHD to another VM (or mount it in another Windows) and then perform the rename and copy operations in File Explorer. Finally detach the VHD, attach to the original VM and start the VM. So you don’t have to boot from install media.
- Don’t forget to delete utilman.exe (which is actually a copy of cmd.exe) after logging in with your new password! If you miss this step, anyone can change your password the same way!
Actually, rem in not correct in this context. REM really just is a comment marker, like #. Ren RENAMES. If you do not do the rename step then you are overwriting the utliman.exe executable forever..
«The procedure also work on Windows 2016R2«
That must be some procedure. It works on a non-existent product! There is no 2016 R2 at this point in time.
I tried using this process on a Windows Server 2012 R2 box last night. The process worked fine UP UNTIL the point I had the first command prompt open. It opened with «X:\source» as the current directory. I was unable to switch to either the C: or D: drive, which I know would normally exist.
I believe the problem may be that the server’s disk is configured as a RAID array, and perhaps the Windows Server DVD I used did not have/load the RAID drivers, so I could not find the proper drive. Any suggestions for how to resolve this. I am very much a novice in the Windows Server world.
I was able to accomplish most of what I needed to do (application software upgrade) using a different local admin account where the password was known. However, I would like to resolve the Administrator password issue so that I can resume a more normal maintenance path.
I have the same problem. Do you have a solution?
I don’t have a solution. I do have a problem
I followed the instructions but everytime I typed in the d: cd windows\system32
I got an statement about the drive not existing. so I played around with the letters of the alphabet. and found one that worked.. x: so I wrote the magic series of commands beginning with x: instead of d
and I closed the file using the icon at the top. but could not find the line where it said «continue»
I ended up repeating the process because nothing was changing. I did not get a prompt about resetting a password. I spent two hours messing around with this.
Suggestions. is the cd drive always d?
bro have you got any success in this problem ?
if yes let me know , i am facing same problem
bro can you guide me
i am facing same problem.
server’s disk is configured as a raid array .
I had the same issue where I could not see the disks from the command prompt. This was from a virtual machine using a paravirtual scsi controller so required the 3rd party driver to see the disks.
What worked for me was to boot to the ISO and instead of repairing, select install. Go as far as which drive to install the media too. On the page where you can load driver, select this option and point it to the 3rd party driver for your controller (i used a floppy disk with driver on). You will need to download the correct driver for your controller and attach it to the server by removable media. When the driver loads you can now see the disks. Now close the window and it will return to the main menu, you can now select repair and launch the command prompt as above.
Use diskpart & list volumes to see which drive the OS is presented on (in my case E). Enter E: and follow the instructions previously posted.
This does the trick.
- Connect/insert Windows ISO/DVD
- Restart computer and boot from CD/ISO/DVD
- Choose language, next
- Choose Repair Your Computer
- Choose Troubleshoot
- Choose Command Prompt
- Find windows drive (in this example, it’s E:\ drive)
Run these commands (this example is for E:\ drive)
- disconnect / eject CD
- power on and wait for logon screen
- CTRL ALT DEL
- Windows Key + U or click the Ease of Access symbol which will open CMD
- Reset the local administrator password:
- Login to the computer as administrator, with the password as P@ssword1
- Rename utilman.exe.old back to the original utilman.exe
Up to the command prompt steps is OK, while enters the d: cd windows\system32 command following reply coming out in command prompt:
«The system cannot find the path specified.»
i tried it works fine but not working on RAID controller..
is it works on RAID ?
while trying on RAID.. Utilman.exe file not found in specified path.
I am unable to find Utilman.exe file
Hi I do have the same issue, did you get any solutions?
This one’s a bit more involved, but basically, the fix above resolved the login issues.
My terminal server (2012 R2) lost all printer functions. After messing with this for 2 days, I did a quick restore from 31 days ago with Veeam backup software. This caused the trust relationship between the server and our domain to be broken. I couldn’t login as the domain admin and I didn’t know the local admin password — tried everything I knew (I built it all), but no luck. I then discovered all the local server passwords were changed when I was on vacation for a security reason. That password didn’t work, either.
Heading up crap creek without a paddle.
In VMWare web console, I created a datastore of the Server 2012 R2 iso image.
Still in the VMWare web console, on the offending terminal server, while it’s powered off, I edited the settings and connected the newly created datastore (iso image) to the CD. Then, still in settings, I changed the boot order to CD ROM first. Saved the settings and booted the server.
The press any key to boot from CD.
prompt came up, I hit enter. Then I followed the above steps, moving to the D drive (system drive) and renamed utilman.exe, etc. and finally the net user administrator Password123 command (didn’t use Password123).
Rebooted the server and logged in as local admin. Then removed the server from the domain (couldn’t login anyway) and rebooted.
Logged in as local admin and added the server back into the domain and rebooted.
The local login is fixed, the domain login is fixed and all my printers are back and working.