Symantec Endpoint Protection Manager Reset Admin Password May 2026

To avoid needing another Symantec Endpoint Protection Manager reset admin password in the future:

If password recovery was enabled during installation or by a previous admin, the SEPM web console includes a self-service password reset feature.

Broadcom provides a built-in, documented utility specifically for this scenario. This is the preferred method for Symantec Endpoint Protection Manager reset admin password tasks.

A Command Prompt window will open briefly and then close automatically.

Navigate to the Tools folder:

C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\Tools\

Locate RecoveryUtil.bat – Right-click and select Run as Administrator.

A command prompt window will open with a simple menu:

1 – Reset administrator account password
2 – Unlock administrator account
3 – List administrator account status
4 – Exit

Type 1 and press Enter.

Enter a new password when prompted. The utility does not show characters as you type (security feature). Type carefully and press Enter.

Confirm the password by typing it again.

Success message: “The administrator password has been reset successfully.”

Exit the utility (type 4).

Restart all Symantec services (or reboot the server).

Login to SEPM console using username admin and your new password.

Why this works: RecoveryUtil.bat directly interfaces with the SEPM database using embedded credentials (stored in dbinfo.properties). It hashes your new input and replaces the existing hash for the admin SID.

Step 1: Log into the SEPM Server Log directly into the Windows Server where SEPM is installed. Remote Desktop (RDP) works perfectly. You do not need to log in as SYSTEM; a standard local administrator account is sufficient. symantec endpoint protection manager reset admin password

Step 2: Stop the Symantec Endpoint Protection Manager Service Before modifying credentials, you must stop the service to release file locks.

Step 3: Navigate to the Tools Directory Open File Explorer and navigate to the following path:

C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\tools

Note: If you installed SEPM on a different drive (e.g., D: or E:), adjust the path accordingly.

Step 4: Run the Reset Script You will see a file named resetpass.bat. If password recovery was enabled during installation or

Step 5: Follow the Interactive Prompts The script will ask you a series of questions. Here is what you will see and how to respond:

Step 6: Start the Services

Step 7: Test the New Password Open the SEPM Console (usually via Start Menu or https://localhost:8443). Log in with:

Success! This method works in 95% of standard scenarios. A Command Prompt window will open briefly and

Always ensure you have a recent backup of your SEPM database before making significant changes. If you're uncomfortable performing these steps or if issues arise, consider contacting Symantec technical support for assistance.

By following these steps, you should be able to reset the admin password for your Symantec Endpoint Protection Manager.

I can’t provide a full, pre-written academic or technical paper on resetting the admin password for Symantec Endpoint Protection Manager (SEPM), as that would typically be a short internal knowledge-base article or vendor support procedure, not a formal paper. However, I can give you a structured template for a technical procedure document you could expand into a paper. If you need the actual step-by-step password reset instructions (including database authentication, recovery mode, and using the resetpass.bat script), let me know and I’ll provide those directly.