Printable View
Thought this would be the best place to direct this question ...
Simply put , i work in an office with multiple computers that run NT/2000 ,
When we changed over network admins about a month ago we were left
with (surprise , surprise ) one computer in the network with locked out admin
privileges .... so basically what im looking for is a way to audit or recover admin pass's
hashes from a NT system that you have full physical assess to.
Any help would be much appreciated ...
do a search on google for a program that will allow you to read from an NTFS partition from DOS. Boot to DOS, and grab yourself a copy of the SAM file. Then, simply use L0phtcrack against the SAM file and it is just a matter of time before it will crack the password hash for ya
(Just being picky)
Since when does windows have root :)
Since linux people woke up...however there are linux boot disc out there that will allow you to change the password on the account for JUST the administrator account.
must be reading from a hckerz manual or something.
Damn cwk9, you beat me to it. I wanted to complain that there was no root account on NT.
If you check Microsofts web site, they tell you how to do this. I don't remember the exact steps, because it has been a while since this was necessary, but you are supposed to use the install cd. You can repair an installation, and just set up a new administrator account and password.
Create Win98 boot floppy, boot with this, then rename
c:\winnt\system32\config\SAM and c:\winnt\system32\config\SAM.log
boot the system up, administrator password is now *blank*
just re-install windows. I don't know if it work with only an upgrade but with a complete installation you will solve certainly your problem :)
You also can use a program to crack the admin password (download section: password crackers or programs specially designs for your windows version), but it's low...
There is a linux disc that will do it cause it has a version of NTFSDOS and it allows you to reset your Admin password that way....I haven't tried it just have it incase of a time I do need it. :-)
I just saw this thread and thought I would put my two sense in, Well I got the SAM file from booting to DOS and copying it, Then I cracked it with l0phtCrack and tried the password that it gave me for Admin, And it didnt work. What could have been the problem?
First off a bit of a confusing question here so let me sort it out.
1. Simply put , i work in an office with multiple computers that run NT/2000 ,
When we changed over network admins about a month ago we were left
with (surprise , surprise ) one computer in the network with locked out admin
privileges .
Question: Is this the domain controller? Or are you talking local privlages or network privlages?