Win 2k Admin passwords

[Arach]

Originally posted by slarty
There are many available tools which will recover a *local* admin password on winNT4/Win2k

The one we use here is

http://home.eunet.no/~pnordahl/ntpasswd/index.html

The "Offline NT password and registry editor"

This works on win2k, however it will not change domain passwords - LOCAL USERS ONLY.

With this you can change the admin password and recover access to the system without having to reinstall - we have found it to be most useful.

Regards
Mark

SLARTY, you are right. After numerous problems with server farm at my work (sys admin left, bogus accounts, multiple domains, you name it), with absolutely NO clues about passwords, I was able to bring all my servers up.

Situation was: 4 NT domains, 1 that I knew admin password for, 9 servers (4 PDCs, 3 BDCs), and I could access only my domain with 1 PDC and 1 BDC. Horrible. Guy left, and didn't leave ANYTHING to start from.

So, i turned to http://home.eunet.no/~pnordahl/ntpasswd/index.html and it worked like a charm.

Now, for win2k, I only used it on Pro version (laptop), and it ALSO worked, so my guess is: make 2 floppies, and enjoy!

Oh, if it's Win2k AS, I think you can't have pwd just blank, so make sure you CHANGE it to something that has at least 6 chars. In my case, I learned it hard way - my NT 4 Ent. Srvr. - I had to have pwd of at least 6 chars or it would report bad pwd. heh...

Good luck.

A.

[sandsword2]

anyone know where yohaeve went?

[dnshacker]

there are a couple of ways of gaining administrator access to this machine..... one if any one else has an admin account on this machine you can go into the user and group management mmc and rename his account and the reset the password or just do the latter. number two you can slave the hard drive rename the sam and recreate a new sam with nothing in the file and move the original renamed sam too another folder and place the new blank sam into the folder where the original sam was(WARNING ADVERSE AFFECTS CAN HAPPEN PLEASE MAKE SURE TO BACK UP STUFF). and three is a long shot but it works for NT there is a a linux loader disk out there that you can create and add another prgram into the boot disk and it will let you reset the admin password i am not sure were to get that boot disk but a search on google will reveal it (eventually) i dont have all the answers those are things that have worked for me in the past i hope they help you if not good luck and happy computing

[whtn0ise]

If this is resolved or if I'm repeating, sorry.

There is a linux boot disk available that apon booting will access WinNT admin password and allow you to either change it or just copy it to a file for running a cracker against. I believe the author is from sweeden. I've not tried this on a 2K system yet.

Another option is to remove the drive and mount it as a slave under a *nix system and access the passwords that way.

Either way, I highly recommend backing the drive up (while a slave) to preserve any data lost due to an "oops". Use your favorite tool or dd.

I'll search for the WinNT linux boot disk name and site. I have a copy at home, but am away for another week and am sure you cann't wait that long.

[whtn0ise]

Well, I can't find the boot disk I wanted to. But here are a couple others...

look in:
http://home.eunet.no/~pnordahl/ntpasswd/
http://www.password-crackers.com/crack2.html

[gera1d]

i recommend u get advanced security nt explorer it works for win 2000 and xp althought i can't remember the site

[sandsword2]

I think the starter of this post quite comming, so I don't know if there is any reason to continue. But it is nice to see suggestions, and people can still look here and get info. Does any one have a good .pwl decryptor? So you can take a .pwl file and it will tell you what is in it.

[ch4nge]

If all you are trying to do is reset the administrator password on a box that you have physical access to, try out Petter Nordahl's Offline NT Password & Registry editor. Works on NT, Win2k, even with syskey enabled!

Petter makes it available as a boot floopy, but I've created a bootable cd iso image from it as well.

Offline NT Password & Registry Editor (boot floppies)
http://home.eunet.no/~pnordahl/ntpasswd/

My bootable cdrom iso image for the above is at:
http://www.dmzs.com/ftproot/security...overy-DMZS.iso

I'd guess this should help.

Change

[llipschutz]

REALLY easy fix. . .and I'm a relative newcomer to crakcing passwds

http://home.eunet.no/~pnordahl/ntpasswd/
download the boot disk there, and boot the machine with it. follow the rather easy instructions, and you can simply CHANGE the adminitrator password. I use it all the time when kids hack the machines i work on at school (I don't secure that completely on purpose). . .it is a great utility.

[llipschutz]

wow, i missed that there were alternate pages to this thread. .sorry for being redundant. . .I should read more closely (or not read and play vidz at the same time)