I'm saying it is impossible to replicate a local admin password across a domain. Others in the know agree. The methodology is wrong and even if it were right, you'd need much more time and knowledge in the field. Its not a guessing game to accomplish what you are saying you accomplished.
Michael is offering you an awesome opportunity to prove us wrong. Go ahead - you'll have unlimited time and unlimited resources.
:bigthumbu
Then maybe he doesn't even know what he's implying. The entire network would be in shambles if something like this were to occur. Services that require an admin password would stop working which means portions of the network would stop working. Not only that, the admins would be locked out of their own machines. They would definitely not casually laugh such an act off since their asses would be on line.
Pinging a server repeatedly allows you to change a password? this is total BS.
To kind of explain more for the clueless--
If he changed the domain admin password--anything service that uses AD/LDAP/RADIUS, etc. would be thrown into shambles.
Examples:
VPN--cutting access from sales, accounting, and IT people that work at home.--oh ya that would go unnoticed for no more then 5min...
Content Filter--You think IT and the higher management have filtered internet access? The filtering is determined by your user group, and the content filter hardware again needs domain admin to poll what group users are in.
Network Management--Whatever they use to poll servers and important infrastructure uses WMI among other things which needs domain admin to run, the entire IT dept would be running around cuz their blackberrys would be pwn'd from the notifications of systems down.
Workstation Management--These use domain admin to poll and deploy updates, software, etc.--Also whatever anti-virus solution they use has their own management system that is separate that would no longer function and the systrays on every machine would turn red in a day or two to let users know they aren't receiving updates--or in the case of certain software make annoying popups to confuse users into calling the helpdesk...
Also, the only cmd that you need to use is net.exe to change a domain password or acct.
NET USER with some arguments and flags can change a domain admin's password--only if you know the current password. It's not some command you use repeatedly over and over until it works...and it's not "pinging a server" either...