Tuesday, 10 January 2012

Symantec EndPoint Protection Manager Console Admin Password Reset

To reset a lost admin password for the Symantec EndPoint Protection Manager console we run the ResetPass.bat file found in:

  • C:\Program Files (x86)\Symantec\Symantec EndPoint Manager\Tools

The PDF for the batch file:


In our attempts to initially figure out the password we locked the account out:


The default lockout period is 15 minutes.

Once the lockout event was released we were able to log on. Note that we were first prompted to change the password prior to getting into the SEP Console.

Philip Elder
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.


Doug H. said...

I have used this tool many, many times. The password lockout is very sensitive by default, and it was especially necessary with SEPM v11 because there was no way to disable password expiry, so almost every time I logged in to the console, I had to change the admin password.

Thankfully in SEPM v12, the password expiry and lockout sensitivity can be customized, hopefully avoiding the need for a password reset in the first place.

Pontsho said...

how do you reset the admin password on SEPM v12 when the mailbox that was linked to it has been deleted.