Callmanager 3.3x passwords compromised

[jrezab]

A client of mine had their administrator password compromised. I looked for a white paper on how to do this but did not find one. I am trying to find the process to change the admin password on a Call manger system and what services also need to be updated.

[darren.staples]

If your only changing the administrator password and not the DC Directory password, then it is quite simple.

create back door (secondary admin account) )

change the administrator password - as normal

change any Services that use administrator password (taps, Apps Service,etc)

change SQL password

---- SQL enterprise manager > server > server group > local >security > login

----- select properties of "sa" account and change to new password

that's should be all

If changing the DC password - search for "How to Change the DC Directory Password" - however they have missed a couple key points - have worked with TAC on this and are suppose to update this document and possibly issue a bug trac on it.

need to also change passsword in c:\dcdsrvr\DirectoryConfiguration.ini

(note the EMApp - is not used in 3.3, so password is not important in the registry.)