Resetting the System Administrator Account in the Document Management System

 

Procedure Overview:

• By default, there is a single System Administrator account in FileHold, which is created by the installer process. We recommend that customers have two (2) or more System Administrators to avoid this issue. This specific administrator account is a locally managed user account type, that is, it is managed by FileHold's user role management system, and is not an Active Directory or IT server administrators windows account.
• Occasionally, there is only this single system administrator account in a customer system, and this account password can be lost, forgotten or locked out due to mulitple incorrect attempts when entering the password.
• You must be an IT server administrator with membership in the local ADMINISTRATORS group on the FileHold Server to use this procedure.

 

There are two specific procedures, one for Windows 2008 Server, and the other for Windows 2003 Server.

TIP: You should always have one backup  FileHold System administrator account with a backup administrator to safeguard it. If you have more than one system administrator account / user you can simply logon to System Administration within the document management system and reset the locked out administrators password OR force the account password setup within your network’s Microsoft Active Directory administration system on the Active Directory Server.

WARNING: Do not use this for a regular user account that has lost its password. Instead logon to the FileHold Web Client as a System Administrator and go to System Admin > User & Group Management > Users. Select the user name and using the contextual drop down menu to the right of the name, select Reset Password. You can also go into the user properties and select the checkbox for "must change password upon next login". Never remove, delete or do anything else to users using this method - the consequences can be severe.

Windows 2008 Precedure

To reset the System Administrator password

1. Log onto the Windows 2008 Server where the FileHold system has been installed.

2. Go to Start Menu > Programs > ADAM > ADAM ADSI Edit.

3. In ADAM ADSI Edit, click the Action menu and select Connect to…

4. In Connection Settings, supply any value for the Connection Name. (Keep as default My
   Connection).

5. Enter in the Name field "FHURM" (without the quotes)

6. Select the Connection Point >  Distinguished Name (DN) or naming context radio button option

7. Enter the following value: OU=UserRoleManager,OU=FileHold

8. Select Computer > Select or type a domain or server option

   • Enter localhost:389 in this field

9. Leave all other options at default settings - all yiou need to do is enter three (3) items - in the Name, Connection Point, and Computer fields.

10. Click OK.

    

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

  

5. The ADSIEdit tool will then connect to the FHURM instance on localhost:389

6. Expand the "FHURM” then expand the “OU=UserRoleManager,OU=FileHold”

7. A list of folders within the ADAM repository appear.

   • Expand the folder named CN=Local Users then right-click the username of the user you wanted to reset password.

   • Click Reset Password.

11. You may also need to re-enable account (if its locked out).  Click the filter button and select Show only attributes that have values, and Show only writable attributes

    • Locate the fh_Account in the user properties list .

    • Set the fh_AccountEnabled value to True and click Apply.

    • You may also need to reset the invalid logon attempt counter. Set the fh-InvalidLogonAttempts value (can be set to 0) and then click Apply. See screenshot below for more details. 

 

You should now be able to login as the sysadm account.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Note: For Active Directory managed users you would have to unlock the user account from the AD console.

 

Windows 2003 Procedure

To reset the System Administrator password

1. Log onto the Windows 2003 Server where the FileHold system has been installed.

2. Go to Start Menu > Programs > ADAM > ADAM ADSI Edit.

3. In ADAM ADSI Edit, click the Action menu and select Connect to…

4. In Connection Settings, supply any value for the Connection Name. (Keep as default My
   Connection).

5. Select the Distinguished Name (DN) or naming context option in Connect to the following
   node section.

6. Enter the following value: OU=UserRoleManager,OU=FileHold

7. Click OK.

8. Expand the "Connection Name” then expand the “OU=UserRoleManager,OU=FileHold”.

9. A list of folders within the ADAM repository appear. Expand the folder named CN=Local
   Users then right-click the username of the user you wanted to reset password.

10. Click Reset Password.

11. You may also need to re-enable account (if its locked out).  Locate the fh_Account in the user properties list .

12. Set the fh_AccountEnabled value to True and click Apply.

13. You may also need to reset the invalid logon attempt counter. Set the fh-InvalidLogonAttempts value (can be set to 0) and then click Apply.

Note: For Active Directory managed users you would have to unlock the user account from the AD console.

 

See Also:

Troubleshooting Articles