[Gabkicks]

Hi.. Window's 2k wont recognize any of my username/passwords.. i know there's a way to change the passwords in MS DOS but I forgot how. I dont even know how to get into dos when the computer's booting up thanks for readin this

[stool]

Hit F8 as its booting(when you get the prompt), then select Safe Mode with Command Prompt. If it doesn't accept your Admin password, though, I believe you might be out of luck.

[Gabkicks]

and that wont take me to a screen asking for a password?

[thefly]

http://home.eunet.no/~pnordahl/ntpasswd/


There are certainly ways of getting back in.

The link above has a boot disk that will reset the password.

Other wise you could pop the drive into another win2k machine and run L0phtCrack (LC3 from heavy industries) on the sam database and see what the passwords are.

[Gabkicks]

thanks, but i still need a way to get into dos before the computer starts loading windows. wuts the hotkey for that. i kinda forgot what the exact windows system location is.. its not winnt or windows. so i need to find out what that is before i can get any closer to changing my password... BTW i have 2 other installations of windows on the Same HD but neither of them work. i never took the time to completely delete them before installing and its come back to haunt me

[electromagnetic]

If you have NTFS, DOS won't do you any good. Try the recovery console from the disc, that will get you in. Also I believe if you've never changed the Administrator password it exists in a text file somewhere. Can't remember where but I've done this myself before. The Linux password recovery floppy works easy enough though, I've used it at work before.

[fadirocks]

I use ERD Commandor 2002 to reset my pass but check this link
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html
http://www.accessdata.com/prtkuser/
http://www.atstake.com/products/lc/
http://www.elhacker.net/hacking.htm#nt don't get crazy with this but find what you need to just hack your own system not everybody else lol!

[fadirocks]

wait I found great links on this page
http://www.experts-exchange.com/Oper..._20348448.html
read CrazyOne's comment it's pretty good


check this one too
http://www.techtv.com/screensavers/d...625960,00.html

[Big_Tex]

check this link out http://www.ultimatebootcd.com/
Its for a boot cd It will do what you want and much much more it is great I take it with me when I go out in the field to do customer jobs.

[fadirocks]

Great CD Big_Tex but does it reset or crack the NT,2k & XP password? I did a fast search on the page and didn't say anything about windows password!

[Gabkicks]

i FORGOT THE name of the folder i installed windows 2k into. its not winnt. any way i can figure out wut it iz?

[Gabkicks]

ok, i just figured out that i named it tempwin... but when i change the passwordss using the program, reset, and then try logging on.. it tells me the password is still wrong.... am i doing something wrong


http://home.eunet.no/~pnordahl/ntpasswd/

[Big_Tex]

yes it will change the password.

How to use?
Yes, long text. Please read it all and the FAQ before mailing me questions
If you have the CD, all drivers are included. If you use the floppy, and you need the SCSI-drivers set, either prepare a floppy with the scsi-drivers .zip file unzipped (in \scsi), or put a selection of the drivers you need in the \scsi folder on the main floppy, there should be enough space for at least 4-5 drivers. In the latter case you don't need to carry around and swap floppies.


Overview
Disk select, tell which disk contains the Windows system. Optionally you will have to load drivers.
PATH select, where on the disk is the system?
File select, which parts of registry to load, based on what you want to do.
Password reset or other registry edit.
Write back to disk (you will be asked)
DON'T PANIC!! - Most questions can usually be answered with the default answer which is given in [brackets]. Just press enter/return to accept the default answer.

1. DISK SELECT
Which disk contains your Windows system?

================================================== =======
. Step ONE: Select disk where the Windows installation is
================================================== =======
Disks:
Disk /dev/ide/host0/bus0/target0/lun0/disc: 2147 MB, 2147483648 bytes
NT partitions found:
1 : /dev/ide/host0/bus0/target0/lun0/part1 2043MB Boot

Please select partition by number or
a = show all partitions, d = load new disk drivers
l = relist NTFS/FAT partitions, q = quit
Select: [1]

For most machines only one disk and parition is listed, if so, just go with selection 1 (default)
Otherwise select partition
If no disks or not all disks are shown, you may need to load disk drivers, for SCSI-controllers (or some IDE-raid controllers). Select d to go to the driver select menu.
2. HOW TO LOAD DRIVERS
Skip this if it is not needed.
Select: [1] d
==== DISK DRIVER / SCSI DRIVER select ====
You may now insert or swap to the SCSI-drivers floppy
Press enter when done:
Found 1 floppy drives
Found only one floppy, using it..
Selected floppy #0
Mounting it..
Floppy selection done..
SCSI-drivers found on floppy:

1 BusLogic.o.gz
2 aic7xxx.o.gz
3 sym53c8xx.o.gz
[ ... ]

SCSI driver selection:
a - autoprobe for the driver (try all)
s - swap driver floppy
q - do not load more drivers
or enter the number of the desired driver

SCSI driver select: [q]

Select a for auto-probe, it will try to load all drivers, and stop when one loads properly. Some drivers may need more driver modules, so you may have to redo the auto-probe several times.
Or if you know what you want, just enter it's number or name.
SCSI driver select: [q] a
[ BusLogic.o.gz ]
Using /tmp/scsi/BusLogic.o
PCI: Found IRQ 11 for device 00:10.0

[.... lots of driver / card info ...]

scsi0: *** BusLogic BT-958 Initialized Successfully ***
scsi0 : BusLogic BT-958
Vendor: FooInc Model: MegaDiskFoo Rev: 1.0
Type: Direct-Access ANSI SCSI revision: 02

[ ... ]

Attached scsi disk sda at scsi0, channel 0, id 0, lun 0
SCSI device sda: 8388608 512-byte hdwr sectors (4295 MB)
Partition check:
/dev/scsi/host0/bus0/target0/lun0: p1
Driver BusLogic.o.gz loaded and initialized.


You may then quit the selection with q or try for more drivers.
When you quit, you will get back to the disk select (see above) and hopefully see more disks.

3. PATH AND FILE SELECT
Where's the Windows system located?
On the selected partition/disk, the main files for windows can theoretically be anywhere. And we must find the registry files to be able to edit them. There are however some usual places:

winnt35/system32/config - Windows NT 3.51
winnt/system32/config - Windows NT 4 and Windows 2000
windows/system32/config - Windows XP/2003 and often Windows 2000 upgraded from Windows 98 or earlier.
These usual paths will be checked, and if found, they will be suggested as the default.

Selected 1
Mounting on /dev/ide/host0/bus0/target0/lun0/part1
NTFS volume version 3.1.
Filesystem is: NTFS

================================================== =======
. Step TWO: Select PATH and registry files
================================================== =======
What is the path to the registry directory? (relative to windows disk)
[windows/system32/config] :
-r-------- 1 0 0 262144 Jan 12 18:01 SAM
-r-------- 1 0 0 262144 Jan 12 18:01 SECURITY
-r-------- 1 0 0 262144 Jan 12 18:01 default
-r-------- 1 0 0 8912896 Jan 12 18:01 software
-r-------- 1 0 0 2359296 Jan 12 18:01 system
dr-x------ 1 0 0 4096 Sep 8 11:37 systemprofile
-r-------- 1 0 0 262144 Sep 8 11:53 userdiff

Select which part of registry to load, use predefined choices
or list the files with space as delimiter
1 - Password reset [sam system security]
2 - RecoveryConsole parameters [software]
q - quit - return to previous
[1] :

If the directory is correct, something like the above will be listed (it may vary a bit..)
You may then choose some canned answers based on what you want to do.
Password reset is the default, and most used.
Option 2, RecoveryConsole is for setting 2 parameters that the Windows 2000 and newer RecoveryConsole (boot from CD, select Recovery and console mode) uses. One of the parameters allows RecoveryConsole to be run without it prompting for the admin password. If you do not know what RecoveryConsole is, don't bother. Or go search the net..
Or if you want to do manual edit of registry, select your hives to load. Enter all names on one line with space between.
We select 1 to edit passwords..


4. PASSWORD RESET
Everything is set and ready, let's roll!

================================================== =======
. Step THREE: Password or registry edit
================================================== =======
chntpw version 0.99.2 040105, (c) Petter N Hagen

[.. some file info here ..]

* SAM policy limits:
Failed logins before lockout is: 0
Minimum password length : 0
Password history count : 0

<>========<> chntpw Main Interactive Menu <>========<>

Loaded hives: <sam> <system> <security>

1 - Edit user data and passwords
2 - Syskey status & change
3 - RecoveryConsole settings
- - -
9 - Registry editor, now with full write support!
q - Quit (you will be asked if there is something to save)


What to do? [1] -> 1

===== chntpw Edit User Info & Passwords ====

RID: 01f4, Username: <Administrator>
RID: 01f5, Username: <Guest>, *disabled or locked*
RID: 03e8, Username: <HelpAssistant>, *disabled or locked*
RID: 03eb, Username: <pnh>, *disabled or locked*
RID: 03ea, Username: <SUPPORT_388945a0>, *disabled or locked*

Select: ! - quit, . - list users, 0x<RID> - User with RID (hex)
or simply enter the username to change: [Administrator]

Here you can enter the username you want to reset the password for. NOTE: It is case-sensitive, write it exact as listed (without the < and > of course)

Or if the name uses some characters that cannot be displayed, enter it's ID number (RID), like this: 0x1f4 would select administrator.

We select the default, which is administrator.



RID : 0500 [01f4]
Username: Administrator
fullname:
comment : Built-in account for administering the computer/domain
homedir :

Account bits: 0x0210 =
[ ] Disabled | [ ] Homedir req. | [ ] Passwd not req. |
[ ] Temp. duplicate | [X] Normal account | [ ] NMS account |
[ ] Domain trust ac | [ ] Wks trust act. | [ ] Srv trust act |
[X] Pwd don't expir | [ ] Auto lockout | [ ] (unknown 0x08) |
[ ] (unknown 0x10) | [ ] (unknown 0x20) | [ ] (unknown 0x40) |

Failed login count: 0, while max tries is: 0
Total login count: 3

* = blank the password (This may work better than setting a new password!)
Enter nothing to leave it unchanged
Please enter new password: *

Some information is displayed. Also, if the account is locked, you will be asked if you wish to unlock it (not shown here)

We go for the blank password option (*) WHICH IS HIGLY RECOMMENDED over setting a new one.


Please enter new password: *
Blanking password!

Do you really wish to change it? (y/n) [n] y
Changed!


Select: ! - quit, . - list users, 0x - User with RID (hex)
or simply enter the username to change: [Administrator] !

! brings us back to the main menu here.



<>========<> chntpw Main Interactive Menu <>========<>

Loaded hives:

1 - Edit user data and passwords
2 - Syskey status & change
3 - RecoveryConsole settings
- - -
9 - Registry editor, now with full write support!
q - Quit (you will be asked if there is something to save)


What to do? [1] -> q


5. WRITING OUT THE CHANGES
Everything has been done, time to commit the changes.


Hives that have changed:
# Name
0 - OK

================================================== =======
. Step FOUR: Writing back changes
================================================== =======
About to write file(s) back! Do it? [n] : y

THIS IS YOUR LAST CHANCE! If you answer y here there will be a write to disk!


Writing sam

NOTE: A disk fixup will now be done.. it may take some time

Mounting volume... OK

Processing of $MFT and $MFTMirr completed successfully.

NTFS volume version is 3.1.

Setting required flags on partition... OK

Going to empty the journal ($LogFile)... OK

NTFS partition /dev/ide/host0/bus0/target0/lun0/part1 was processed successfully.
NOTE: Windows will run a diskcheck (chkdsk) on next boot.
NOTE: this is to ensure disk intergity after the changes

***** EDIT COMPLETE *****

You can try again if it somehow failed, or you selected wrong
New run? [n] : n


That was all. The disk fixup is only run on NTFS filesystems, and will force chkdsk next time windows boots.

Please answer n here and then reboot, CTRL-ALT-DEL. Remember to remove the floppy or CD.



What can go wrong?
Lots of things can go wrong, but most faults won't damage your system.
The most critical moment is when writing back the registry files to NTFS. Also, the file written back may be corrupt (from chntpw messing it up), preventing your NT system from booting properly. YOU HAVE BEEN WARNED! One indication of a corrupt SAM is that the Netlogon service will fail to start, which again means it's impossible to log in. Or it will simply just reboot forever.

Also, see the FAQ for help with common problems.

For linux-knowledged people, you may do things manually if the scripts fail, you have shells on tty1-tty4 (ALT F1 - ALT F4).

[Gabkicks]

I did all of that and it still didnt change the password...

[Big_Tex]

Did u dl the iso and burn the disk then boot up so the bootable cd comes up.It should work have done it on two different systems no problems here.If it didnt work I am sorry but atleast u have a great bootable cd that does just about everything u need.

[theoneinventor]

if you ever just forget your password or somthin then heres what to do: i know someone that forgot his password to xp so he went to a hypnotist and had the hypnotist hypnotize him and find out what the password was. lol

[Big_Tex]

Is that really helpful or u just posting to get post count.Some ppl will do anything to get a post count including spam.

[fadirocks]

heh if that didn't work then that means your profile is corrupted and need to recovery and/or repair

Start machine and hit F8 before it loads the winXP logo and you can choose from a list to what to do!
you can try to login as admin from safe mode or can use the repair option.
if that doesn't work get your XP CD reboot on it and try the repair mode!
if all fails just use http://Knoppix.net to backup your files and reinstall windows

[Gabkicks]

thanks, but isnt that for linux? i have the windows 2k upgrade cd

[fadirocks]

knoppix is a linux on a CD but it can read all FAT and NTFS if you have 2 CDdrives you can run knoppix on CDROM drive and burn the CD using your CDRW drive I'm not sure if you can burn DVDs with knoppix but probably you can. after you get thigs backed up reinstall windows!