Hmmm, when we migrated to AD, we retired the first domain controller. Where might the account you mention be now, or is it gone? Regards, Margaret ----- Original Message ----- From: "Rob Neary" <[log in to unmask]> To: <[log in to unmask]> Sent: Saturday, March 09, 2002 10:10 PM Subject: Re: account lockup trouble > Sorry to get in on this discussion late... > > There is one account on all WinNT/2K/XP systems which can not be locked out. > In the case of a stand-alone machine, its "The" admin account (typically > called Administrator, and in the case of a Domain Controller (or Active > Directory) it's the FIRST Admin account on the FIRST box in the Domain (PDC) > or the first Admin account on the first DC you promote to an AD DC. I've > attached an image of what this looks like in AD, and you can look for a > description of "Built-in account for administering the computer/domain". > > Once you've identified this account, if you don't know what the password is, > you can use a mildly expensive tool to boot to a CD, mount your NTFS > partition, and reset the appropriate registry key: > > http://www.winternals.com/products/repairandrecovery/erdcommander2002.asp > > This tool will also let you list the accounts (in case you renamed it an/or > don't know what it is called). > > Hope that helps - and if you're really in a pinch, let me know and I can help > you with the ERD disc... > > Rob Neary > Medical School Information Systems > University of Michigan > [log in to unmask] > > > -----Original Message----- > > From: Fred Ododa [mailto:[log in to unmask]] > > Sent: Saturday, March 09, 2002 3:55 PM > > To: [log in to unmask] > > Subject: Account Lockout!!! >