SetRMPassword – Reset the Recovery Mode password on a Microsoft Active Directory Domain Controller
Written in 2008 for the Windows versions of the time. Check that the tool or steps still suit your environment before using them.
- Run on the domain controller
- Antivirus exclusion may be needed
SetRMPassword by Shaun Vermaak is a script that automates ntdsutil.exe to allow a single line command to reset the Recovery Mode password on a Microsoft Active Directory Domain Controller
False positive on some Anti-Virus products so both compiled- and auto-it script is included in the download
Publishers website: https://www.ittelligence.com
ITtelligence mirror: SetRMPassword.zip (228.96 Kb)
Usage: SetRMPassword.exe PASSWORD
How to Use ItLink to this section
The download contains only the AutoIt script, SetRMPassword.au3. Run it with AutoIt, or compile it to SetRMPassword.exe first. It starts ntdsutil.exe and types the commands to reset the DSRM password on the local domain controller.
SetRMPassword.exe PASSWORD
AutoIt3.exe SetRMPassword.au3 P@55w0rd2008Run it in an interactive session on the domain controller and leave the ntdsutil window alone until it closes. A "Done" message box appears for 10 seconds and the exit code is 0. If %WINDIR%\system32\ntdsutil.exe is missing it shows "Ntdsutil.exe does not exist" and exits with code 1.
Note: the password is typed with AutoIt's Send, so the characters + ^ ! # and braces are treated as key codes. Avoid them or the password set will not be the one you typed. "Done" is shown whether or not ntdsutil accepted the password. The script waits with no timeout for a window titled with the full path to ntdsutil.exe, so it hangs if the title is different.
No comments yet
Comments are moderated and appear once approved.