Chris: I’m in a jam. I took over a contract with a new office and cannot log in to their domain controller. I contacted the previous contractor and the password he gave me doesn’t work. I can boot into Directory Services Restore Mode, but cannot login to the domain. Is there anything that I can do to reset the domain administrator password?

You do have a few choices here. Since you can get to Directory Services Restore Mode, resetting the domain administrator password can be accomplished in a few minutes. If you need to reset the Directory Services Restore Mode Password, you can do this using the Offline NT Password & Registry Editor Bootdisk/CD. The Offline NT Password & Registry Editor is a nice tool for resetting local account passwords, and since it’s free, it works for my budget.

On a domain controller, you can access Directory Services Restore Mode by pressing F5 when the system starts to boot and then selecting Directory Services Restore Mode from the Windows Advanced Options Menu.

Once you’re logged in to Directory Services Restore Mode, you’re ready to setup the password reset. My preferred method is to use the Windows Resource Kit tool AutoExNT. AutoExNT allows you to configure a batch script to run when the system starts, so it’s an easy way to use a script to change the domain administrator password. To use this method to reset the domain administrator password, you’ll first need to download the Windows Server 2003 Resource Kit Tools. You can install the tools on any Windows XP or Windows 2003 system. Once the tools are installed, navigate to the Resource Kit Tools installation folder (default location = C:\Program Files\Windows Resource Kits\Tools). From the Tools folder, you’ll need these three files: Autoexnt.exe, Servmess.dll, and Instexnt.exe. All three files should be copied to the %systemroot%\system32 folder (default = C:\Windows\system32) on the domain controller.

With these files in place you now need to create a batch file to be used by the service. To do this, run the command:

notepad %systemroot%\system32\Autoexnt.bat

When prompted to create the file, click Yes. Now in Notepad, enter:

net user administrator P@ssw0rd /domain

In my example, I set the password to P@ssw0rd. Of course, you can set this to whatever you like. Once you have this line in the batch file, save the file and close Notepad.

You’re now ready to install the AutoExNT service. To do this, go to the command prompt and run the command instexnt install. When the command completes, you should see the message “CreateService AutoExNT SUCCESS with InterActive Flag turned OFF.” By default, the service will be set to Automatic, so you’re ready to go.

Now you can just reboot the domain controller. When it reboots, the password will be set to the password that you specified in the batch file. Log in as administrator with the new password and you’re all set. Of course, you’re not going to want the AutoExNT service to run anymore at bootup, so you’ll need to uninstall the service. To do this, go to the command prompt and run the command instexnt remove. You should now see the message “DeleteService SUCCESS” and you’re all done.

With this tool in your bag of tricks, try not to give away how easy the password reset really is. I prefer to build the drama like any good episode of House . “I can’t promise anything, but I’ll do the best I can to save her. I need to be alone for this, so please wait outside.” After resetting the password, you triumphantly leave the server room to the applause of your peers. Oh wait. I never actually did that. It was only one of my pathetic dreams. I know…pretty sad!

conf t
line console 0
exec-timeout <minutes>

1440 would change the period to 1 day (24 x 60)

0 0 never timeout

Config File

Config file

http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010

We will perform these steps to assign Exchange Services with our New Certificate:-

1.       Create a Certificate Request (.req) file

2.       Submit Request to the Certificate Authority

3.       Attach Certificate the EMC

4.       Assign Services to the Certificate

How to generate a Certificate Request File

1.       Open the Exchange Management Console.

2.       Click on Server configuration.

3.       In the Action pane of right-side, click on New Exchange Certificate.

4.       Enter any meaningful and friendly name for this new certificate in Introduction window.

5.       In the Domain Scope window, select the Enable wildcard certificate checkbox, if required. This is the recommended practices in Exchange Server 2010 as it simplifies the certificate processing for sub-domains as well. You can enter wildcard in the form of *.techpeoples.net. The downside of using wildcard are:

• It is expensive
• Security issues
• Windows Mobile 5 and previous versions do not support wildcard certificates. Only Windows mobile 6 and later versions have the support of wildcards.

For this article, we will not use the wildcards and click Next.

6.       In the Exchange Configuration page, you can select a number of options for which you want to create a certificate. Theseoptions are:-

• Federal Sharing
• Client Access server (Outlook Web App)
• Client Access server (Exchange ActiveSync)
• Client Access server (Web Services, Outlook Anywhere, and Autodiscover)
• Client Access server (POP/IMAP)
• Unified Messaging
• Hub   Transport server
• Legacy Exchange Server

Click Next once you have selected and configured the above requests.

7.       In the Certificate Domain page, you will be displayed the list of domains that will be added to the certificate. These domains will be generated from the previous window. You can also assign a common name to the domains; like in our case we will select mail.techpeoples.net as our common name. Click Next when done.

8.       In the Organization and Location page, enter Organization and Country details. Click on Browse to enter the location of the.req file and click Next.

9.        Once you are sure with the Configuration Summary, click on New to complete the Exchange Certificate process.

10.   Click Finish to close the window.

How to Submit Request to the Certificate Authority

Next step is sending the request to any Certificate Authority (Internal/.External).

1.       Open the .req file saved above and Copy all the contents.

2.       Open the Certificate Services page, by opening the Internet Explorer and enter the http://localhost/certsrv URL.

3.       Click on the Request a certificate task option.

4.       Click on the advanced certificate request on the next screen.

5.       On the Advanced Certificate Request page, click on the base-64 encoded link.

6.       Paste the contents of .cer file in the Saved Request box.

7.       In the Certificate Template, select the Web Server and click on Submit.

8.       Depending upon your Certificate type, you will be issued the certificate. Next step will be to download this certificate by clicking on the Download certificate link in Certificate Issued screen.

9.       Save the .cer file to any location.

How to Attach Certificate in Exchange Management Console

1.       Open the Exchange Management Console.

2.       Click on the Server Configuration. You will see your certificate as Self Signed=Yes in the detail pane, which is not ideal.

3.       Click on the Complete Pending Request option in the Action pane on the right-side.

4.       In the Introduction page, enter the location of .cer file saved above.

5.       Click on Complete.

6.       Once the wizard is completed successfully, click on Finish to close the window.

7.       Once done, you will see your certificate as Self Signed=False.

How to Sign the Certificate to the Services

As you can see from the Exchange Certificate tab in Server Configuration detail pane, no service is associated with our new certificate.  To link services with our new certificate, perform below steps.

1.       Open the Exchange Management Console.

2.       Click on Server Configuration and in the Action pane, click in Assign Services to Certificate.

3.       In the Select Servers window, select you server and click on Next.

4.       Select the Services that you want to assign to your certificate. Followings are the services which you can select.

• Internet Message Access Protocol
• Post Office Protocol
• Simple Mail Transfer Protocol
• Internet Information Services
• Unified Messaging

5.       Once you have selected the services, click on Assign.

6.       A pop window will appear to overwrite the existing default SMTP certificate. Click on Yes.

7.       On wizard is completed successfully, click on Finish to close the window.

8.       Once wizard is closed, you can confirm the services associated with your certificate from the Exchange Certificates in the detailed pane of Server Configuration.

Certificate has now been assigned to the Exchange Services; you can now enable Outlook Anywhere, Configure External Client Access Domain and so on.

Just Backup lgntopl.gif and logoowa.png under default themes folder and replace by your customize one.

Introduction

This document explains how to download a software image to a Cisco 2600/2800/3800 Series Router using Trivial File Transfer Protocol (TFTP) over the first LAN port using the ROMmon tftpdnldcommand.

Notes:

• The ROMmon TFTP transfer works on the first LAN port only. However, for the Cisco 2612, you can choose the Token Ring or Fast Ethernet port.
• You can only download files to the router. You cannot use ROMmon TFTP to get files from the router.
• The transfer does not support route bridging on Token Ring ports.

Components Used

This document is not restricted to specific software and hardware versions.

Conventions

Refer to Cisco Technical Tips Conventions for more information on document conventions.

Operation

First, you must set ROMmon environment variables prior to the TFTP download. All variable names are case sensitive.

You can view the ROMmon environment variables by using the set command, as shown here:

rommon 3 > set
    PS1=rommon ! >
    IP_ADDRESS=172.18.16.76
    IP_SUBNET_MASK=255.255.255.192
    DEFAULT_GATEWAY=172.18.16.65
    TFTP_SERVER=172.18.16.2
    TFTP_FILE=quake/rel22_Jan_16/c2600-i-mz

The variables to set for tftpdnld are shown here:

usage: tftpdnld [-ur]
  Use this command for disaster recovery only to recover an image via TFTP.
  Monitor variables are used to set up parameters for the transfer.
  (Syntax: "VARIABLE_NAME=value" and use "set" to show current variables.)
  "ctrl-c" or "break" stops the transfer before flash erase begins.

  The following variables are REQUIRED to be set for tftpdnld:
            IP_ADDRESS: The IP address for this unit
        IP_SUBNET_MASK: The subnet mask for this unit
       DEFAULT_GATEWAY: The default gateway for this unit
           TFTP_SERVER: The IP address of the server to fetch from
             TFTP_FILE: The filename to fetch

  The following variables are OPTIONAL:
          TFTP_VERBOSE: Print setting. 0=quiet, 1=progress(default), 2=verbose
      TFTP_RETRY_COUNT: Retry count for ARP and TFTP (default=7)
          TFTP_TIMEOUT: Overall timeout of operation in seconds (default=7200)
         TFTP_CHECKSUM: Perform checksum test on image, 0=no, 1=yes (default=1)

  Command line options:
   -r: do not write flash, load to DRAM only and launch image
   -u: upgrade the rommon, system will reboot once upgrade is complete
rommon 14 >

Note: As detailed in Cisco bug ID CSCdk81077 (registered customers only) , for Cisco 2600 and 1720 Series Routers running the ROM monitor command tftpdnld, the command might report a bad checksum comparison when it loads Cisco IOS software images of Cisco IOS Software Release 12.0(2.2)T or later.

Note: As a workaround to this problem, set the ROM monitor variable TFTP_CHECKSUM to 0. This is done by defining the variable TFTP_CHECKSUM=0 from the ROM monitor set command, and then proceeding with the tftpdnld procedure.

set 4 ( default auto )

rommon 16 > IP_ADDRESS=171.68.171.0
     rommon 17 > IP_SUBNET_MASK=255.255.254.0
     rommon 18 > DEFAULT_GATEWAY=171.68.170.3
     rommon 19 > TFTP_SERVER=171.69.1.129
     rommon 20 > TFTP_FILE=c2600-is-mz.113-2.0.3.Q
     rommon 21 > tftpdnld

               IP_ADDRESS: 171.68.171.0
           IP_SUBNET_MASK: 255.255.254.0
          DEFAULT_GATEWAY: 171.68.170.3
              TFTP_SERVER: 171.69.1.129
                TFTP_FILE: c2600-is-mz.113-2.0.3.Q

     Invoke this command for disaster recovery only.
     WARNING: all existing data in all partitions on flash will be lost!
     Do you wish to continue? y/n:  [n]:  y

     Receiving c2600-is-mz.113-2.0.3.Q from 171.69.1.129 !!!!!.!!!!!!!!!!!!!!!!!!!.!!
     File reception completed.
     Copying file c2600-is-mz.113-2.0.3.Q to flash.
     Erasing flash at 0x607c0000
     program flash location 0x60440000
     rommon 22 >

-For a server that will have the typical installation

Run this command on cmd ( need to point scripts folder under exchange installation CD )

sc config NetTcpPortSharing start= auto
ServerManagerCmd -ip Exchange-Typical.xml -Restart

Run following command on PowerShell

Set-Service NetTcpPortSharing -StartupType Automatic

And Install the followings.

Windows Management Framework (Windows PowerShell 2.0, WinRM 2.0, and BITS 4.0)

2007 Office System Converter: Microsoft Filter Pack