Hack a Windows XP user account

[eSDee]

I have a friend who forgot his password for a laptop that he screwed up when he was in Iraq. Basically he crushed the screen so you can't see anything, and he though he had lost everything since he couldn't access his files anymore. He tried hooking it up to an external monitor but it didn't work, because as soon as it passed the Windows XP screen the external monitor would go blank. I figured out that if you boot into Safe Mode then you can still log in to Windows. The problem is I can only log into the Guest Account because he forgot his password. I tried using the Ultimate Boot CD but for some reason it wouldn't boot. However the Windows XP disk works as a boot disk and so I was able to reset his password by following the instructions on this page:

http://pubs.logicalexpressions.com/pub0009/LPMArticle.asp?ID=305

Basically, do a Windows Repair. After it copies all the files it needs to repair with, it will reboot. When you are in the Windows installation screen, hit Shift + F10. This gets you to a command prompt, at which point you type in the command NUSRMGR.CPL and hit enter. It then pops up the GUI Accounts panel, which allows you to delete/change user passwords. You have to continue the installation process but after that, you're good to go!

This is a great nugget of knowledge for Sys Admins. I thought a few of you might appreciate it.

[mechmike0034]

Great stuff, bro, but there's a quicker and easier way that does not require a repair install:

http://home.eunet.no/pnordahl/ntpasswd/

Linux-based boot disk that resets passwords - works excellent...

I'm still gonna make note of your method. There's always more than one way to get there...

[MikeD]

Good info guys. This Sys Admin thanks both of you. :bow:

[mcs328]

Excellent!! Should we have a sub-forum for all these tricks or does a search work out well? I've bookmarked some of the sites mechmike posted before posts like these are very good to keep around.

[eSDee]

Well like I said I was having trouble booting to other discs other than the XP disc. Not sure why, since I tried multiple CD's to no avail. But thanks for that link as well. This way I described takes about 40 mins or so, which is not good if you are in a rush.

[Jeffbx]

Great stuff, bro, but there's a quicker and easier way that does not require a repair install:

http://home.eunet.no/pnordahl/ntpasswd/

Linux-based boot disk that resets passwords - works excellent...


I've used this one before on an old laptop that one of the VPs found in a drawer from when he worked in our Japanese office. No idea what the password was, and it was a Japanese version of W2K. Booted up with this program on a floppy, and it worked like a charm. It extracts the administrator password in just a few seconds.

[gwilks98]

Great stuff, bro, but there's a quicker and easier way that does not require a repair install:

http://home.eunet.no/pnordahl/ntpasswd/

Linux-based boot disk that resets passwords - works excellent...

I'm still gonna make note of your method. There's always more than one way to get there...


Important to note this about your utility:
(From the FAQ)
Why can't I access my encrypted (EFS) files after resetting the password?
Because in XP and possibly later service packs in win2k the password itself is used to encrypt the keys needed for EFS.
Sorry, there is no way to recover the files once the password has been reset.
A lot of times, users protect "my documents" with EFS. Let the user beware :dodgy:

[mechmike0034]

Important to note this about your utility:
(From the FAQ)
Why can't I access my encrypted (EFS) files after resetting the password?
Because in XP and possibly later service packs in win2k the password itself is used to encrypt the keys needed for EFS.
Sorry, there is no way to recover the files once the password has been reset.
A lot of times, users protect "my documents" with EFS. Let the user beware :dodgy:

Great point, and I should have noted that. Most of the users I deal with wouldn't have a clue about encrypting files, but then again the limited IT stuff I do is way outside the corporate world.

Any time I do have to work on a PC for an individual, I make sure that I explain that worst case scenario everything could be gone. Usually by the time I get to it I am the "last chance garage" so to speak.

Still, thanks for bringing up that very important point.


Excellent!! Should we have a sub-forum for all these tricks or does a search work out well? I've bookmarked some of the sites mechmike posted before posts like these are very good to keep around.

Check the links page of my humble (and newly re-done) website. The addy is posted in the Spam forum, as well as in my profile. I made a page of what I felt was the "best of the best" for home users.

Maybe I should put a tech tricks/tech links page together... Ahh, so many projects, so little time...

[gwilks98]

Anyone know if SD's method works around the EFS issue? I've never used it before, so I would only be guessing.