PDA

View Full Version : Windows Administrator password recovery tool?


rudychav
03-27-2009, 10:23 PM
What do you use to reset a lost Adminstrator password on all windows platforms? If this question is already posted, please give me link. Thanks very much.

afisher
03-27-2009, 11:03 PM
first post!

Hi, I've used ophcrack before, to recover passwords, works especially well if you have the extra tables.

I can't post urls as of yet as it's my first post, so google ophcrack, you'll find it, it's on sourceforge.


i'm pretty sure the tables cost, not sure how much as i recieved the software through work.

i've also used some other tools, with varying degree's of success,
one is:

"offline nt password and registry editor" (google that also, top result)

i'd reccomend clearing the password if possible, rather than trying to reset it to a new one, it's been known to mess-up a few times when trying to reset a password, better to clear it, then boot into windows and set a new one if needed.

Hope it helps.

seedubya
03-28-2009, 12:17 AM
http://home.eunet.no/pnordahl/ntpasswd/ Only one I've ever needed.

Ophcrack is awkward and painful to use but v. powerful when you've no other options.

Bobbing
03-28-2009, 12:25 AM
Password Renew

This is a utility to:

* (re)set the passwords of any user which has a valid local account,
* create a new local user with administrator rights
* and set administrator rights to existing user on your NT system.
* Can reset local administrator password on the pc that is in domain, using NULL Administrator password feature.
* Must use it under WinPE/BartPE

http://www.kood.org/windows-password-renew/

purple_minion
03-28-2009, 12:41 AM
If you're gonna do this as a business grab SystemRescueCD, it has a ton of good stuff and will allow you to change the password on windows. It's linux so if that scares you then in the words of monty python "Run away run away! Killer Linux!"

afisher
03-28-2009, 01:18 AM
seedubya, thats the offline nt password and registry editor that i mentioned, good little tool, and i agree that ophcrack is a final option, using another program to clear it if you can, is alot quicker, but as mentioned it's quite powerful.

will look into SystemRescueCd purple minion, thanks for that!

will check out that password renew also, anything that can be run under winpe is usually welcome, if it's useful :)

Menaice
03-28-2009, 02:07 AM
hirens 9.5 boot cd just boot to the cd and choose the password and recovery tool it will list all the user accounts on the computer you can erase any password on any account on the computer works everytime

rudychav
03-28-2009, 05:26 AM
This community is great! Lots of great minds in this group! Thanks for all your help

AtYourService
03-28-2009, 06:36 PM
Check out my site i've posted a few articles in the windows section on various methods on how to do this.
http://www.whatsmypass.com/?cat=7

thecomputerdoctorofrichmo
03-30-2009, 03:44 AM
I just used this earlier today with much success, home.eunet.no/pnordahl/ntpasswd/ Offline NT password reset and registry editor boot cd worked great.

I'm not sure about some of the other suggestions, but this one does work with both XP and Vista. I know that ERD systernals commander boot disk does not work with Vista.

I've also used Ophcrack for recovering and not resetting passwords. However, even though it's advertised to work with vista, I've not had success with vista yet. But i have had much success with XP.

Methical
03-30-2009, 03:55 AM
I have a 5MB bootable .iso on my desktop PC (which doesn't work atm), that boots into what looks like a Linux bash shell, hit enter 5 times, choose the username you want to clear the password for, hit 'Y', hit enter a couple more times. RESTART.

Easiest method I've found so far.

Download Here (http://wvw.downarchive.com/software/others/6526-delete-xp-vista-login-password.html)
^ I think thats the one, not sure, just did a quick search of my Google Feeds. Its in there somewhere, thats how I found it. =)
I've tested this and got it working on:

XP HOME SP2 & SP3
XP PRO SP2 & SP3
VISTA HOME BASIC
VISTA HOME BASIC SP1
VISTA HOME PREMIUM
VISTA HOME PREMIUM SP1

All 32-bit as well. Haven't tested on a 64-bit system.

abe
03-30-2009, 05:23 AM
what you have is probably win key enterprise 5mb .iso

Bobbing
04-01-2009, 05:08 PM
Can't Log On to Windows XP?


1. Place your Windows XP CD in your cd-rom and start your computer (it’s assumed here that your XP CD is bootable – as it should be - and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd Typically, it will be “Press any key to boot from cd”

3. Once you get in, the first screen will indicate that Setup is inspecting your system and loading files.

4. When you get to the Welcome to Setup screen, press ENTER to Setup Windows now

5. The Licensing Agreement comes next - Press F8 to accept it.

6. The next screen is the Setup screen which gives you the option to do a Repair.

It should read something like “If one of the following Windows XP installations is damaged, Setup can try to repair it”

Use the up and down arrow keys to select your XP installation (if you only have one, it should already be selected) and press R to begin the Repair process.

7. Let the Repair run. Setup will now check your disks and then start copying files which can take several minutes.

8. Shortly after the Copying Files stage, you will be required to reboot. (this will happen automatically – you will see a progress bar stating “Your computer will reboot in 15 seconds”

9. During the reboot, do not make the mistake of “pressing any key” to boot from the CD again! Setup will resume automatically with the standard billboard screens and you will notice Installing Windows is highlighted.

10. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

11. At the prompt, type NUSRMGR.CPL and press Enter. Voila! You have just gained graphical access to your User Accounts in the Control Panel.

12. Now simply pick the account you need to change and remove or change your password as you prefer. If you want to log on without having to enter your new password, you can type control userpasswords2 at the prompt and choose to log on without being asked for password. After you’ve made your changes close the windows, exit the command box and continue on with the Repair (have your Product key handy).

13. Once the Repair is done, you will be able to log on with your new password (or without a password if you chose not to use one or if you chose not to be asked for a password). Your programs and personalized settings should remain intact.

I tested the above on Windows XP Pro with and without SP1 and also used this method in a real situation where someone could not remember their password and it worked like a charm to fix the problem. This security hole allows access to more than just user accounts. You can also access the Registry and Policy Editor, for example. And its gui access with mouse control. Of course, a Product Key will be needed to continue with the Repair after making the changes, but for anyone intent on gaining access to your system, this would be no problem.
And in case you are wondering, NO, you cannot cancel install after making the changes and expect to logon with your new password.

Cancelling will just result in Setup resuming at bootup and your changes will be lost.

Ok, now that your logon problem is fixed, you should make a point to prevent it from ever happening again by creating a Password Reset Disk. This is a floppy disk you can use in the event you ever forget your log on password. It allows you to set a new password.

Here's how to create one if your computer is NOT on a domain:
Go to the Control Panel and open up User Accounts.

Choose your account (under Pick An Account to Change) and under Related Tasks, click "Prevent a forgotten password".

This will initiate a wizard.

Click Next and then insert a blank formatted floppy disk into your A: drive.

Click Next and enter your logon password in the password box.

Click Next to begin the creation of your Password disk.

Once completed, label and save the disk to a safe place.

How to Log on to your PC Using Your Password Reset Disk

Start your computer and at the logon screen, click your user name and leave the password box blank or just type in anything. This will bring up a Logon Failure box and you will then see the option to use your Password Reset disk to create a new password. Click it which will initiate the Password Reset wizard. Insert your password reset disk into your floppy drive and follow the wizard which will let you choose a new password to use for your account.

dhrandy
04-01-2009, 05:44 PM
Can't remember the names of them at the moment, but they're on the UBCD for Windows CD. There's two on there that will work on XP and Vista. I tested both of them.

Bobbing
04-01-2009, 10:38 PM
Can't remember the names of them at the moment, but they're on the UBCD for Windows CD. There's two on there that will work on XP and Vista. I tested both of them.

You're thinking of the one I recommended, Sala's "Password Renew" and "Password Pro"

dhrandy
04-01-2009, 10:42 PM
You're thinking of the one I recommended, Sala's "Password Renew" and "Password Pro"
Yes. Thank you.

DonnieB
06-16-2009, 08:42 PM
This is in reply to Menaice. Went to download Hirens 9.5 but my anti-virus, [Avast} blocked the download as having a Trojan virus in it. I also use Returnil virtual machine to protect my pc when surfing the net.

Bobbing
06-17-2009, 12:51 AM
This is in reply to Menaice. Went to download Hirens 9.5 but my anti-virus, [Avast} blocked the download as having a Trojan virus in it. I also use Returnil virtual machine to protect my pc when surfing the net.

Most likely a false positive. With tools like these your going to get anti virus programs flagging them.

0gr3
06-17-2009, 01:04 PM
This is in reply to Menaice. Went to download Hirens 9.5 but my anti-virus, [Avast} blocked the download as having a Trojan virus in it. I also use Returnil virtual machine to protect my pc when surfing the net.

It is a false positive. I have downloaded and use it fine and my AV is Avira.

itsJim
06-25-2009, 07:14 PM
Trinity Rescue Kit has worked well for me when resetting Windows passwords.