Printable View
That explains why I couldn't get into safe mode!Quote:
Originally posted here by MsMittens
After a little experimentation and a bit of research I've discovered the following (feel rather silly as I probably should know this.. but anyways):
Windows XP Professional: since this was designed for corporate environments, the option to boot into safe-mode and thus be the administrator won't work. You'll need to know the password of the administrative account(s)
Steve
Byt the output it looks very much like EBCD. At least it does the same. Most seem to be working in about the same way and same or similar menus.Quote:
Originally posted here by MsMittens
Uh... what's the question? Generally if you are creating a new password you need the old password, unless you are using one of the "tools" that can by-pass this. Hrmmm.. have you clicked on the link I provided and seen what it does? Experiment with it on a "dumdum machine" (that is a machine you can scarifice in case of... "Ooops!" situations)
NTPassword works on a boot diskette and gives you the option to reset pwd or to change/replace the pwd (NT Hash value) for certain user (built in and non built in accounts).
No, I mean Encrypted File System (EFS). Read + viewed demo movies + tested myself :)Quote:
Uh.. do you mean ERD rather than EFS? Or is there something you are referring to that you've read somewhere else? If you mean the ERD I was referring to whereby it copies the SAM to the Repair directory (much like rdisk /s did in the NT days), then yes you could grab it and then use a tool like L0phtCrack (aka LC5 and now $$$$$$$). Other tools to consider include Cain'n'Abel and/or SamInside. Now as admins we aren't doing this for malicious reasons but rather to test our users' password strength, right?
Since replacing or resetting a pwd on a system with EFS wont let you access any of the files you need to crack the original pwd. So you copy the SAM and the SECURITY files and crack the pwd with, say L0phtCrack. Especially easy if LM Hash is enabled.
Thx for some clarifications :)
Btw. I'm too old to like destroying others properties by hacking for evil intentions. I do, though, LOVE making it tough for hackers and wannabe hackers to access my domain/comps.
Lost passwords is a common thing among normal users, even when they use easy pwds.
Forgot.
There is also this preventive measure I found on MS site:
http://support.microsoft.com/kb/305478
Too late for Steve though.