Guys:

How can you get the hashes from a Windows 2003 domain controller server? I am in front of the the domain controller, so there is not need run any exploit. I do not have the administrator password.

The password had change and nobody is responsible, so I did this:

1. I used a password reset cd and reset the administrator in the SAM (remember is a domain controller and use AD).
2. I restarted the server and press F8 and choose Directory Services Restore Mode (domain controller only).
3. Follow the instructions in this site: http://www.petri.co.il/reset_domain_admin_password_in_windows_server_2003_ad.htm

I tried first in a virtual machine and worked so I did live. In the beginning I tried to obtain the hash to crack the password, but I could not do it. I took me 5 hours but it worked.

I do not know what is PW cracket is?

I used one similar to reset the local account, but remember I needed to reset active directory administrator password and this kind of tools does not do it