AHHH! (Forgot Win2k logon password)

Mitth · Post by **Mitth** » 2004-09-07 05:50pm

Alright. I have Win2k pro... I was fiddling with settings, and I need my logon password. Well, back when I installed windows, I set my password to something that I thought was clever and good and no one would get it. I was right.

I'd prefer something that just gave me the current password, but resetting it works too.

I tried to search for this kind of shit once before, and I couldn't get anything to work.

Exonerate · Post by **Exonerate** » 2004-09-07 06:48pm

Do you have Admin access? If so, you can try L0phtcrack...

I don't remember if Win2k has SYSKEY encryption like XP does... If it doesn't, you should be able to just copy the SAM file and crack it at another computer.

If you're really desperate, just do some Googling, there are programs that allow you to erase current passwords.

Mitth · Post by **Mitth** » 2004-09-07 07:25pm

Exonerate wrote:Do you have Admin access? If so, you can try L0phtcrack...

Nope. And L0phtcrack costs mone, anyway

I don't remember if Win2k has SYSKEY encryption like XP does... If it doesn't, you should be able to just copy the SAM file and crack it at another computer.

Unfortunately, there is no way to get the SAM file from here to my other computer. No floppy drive on it, and the network won't work on this account.

If you're really desperate, just do some Googling, there are programs that allow you to erase current passwords.

I've tried googling that kind of stuff. I didn't find anything.

Pu-239 · Post by **Pu-239** » 2004-09-08 01:59am

Try http://home.eunet.no/~pnordahl/ntpasswd/

Crayz9000 · Post by **Crayz9000** » 2004-09-08 03:33am

Mitth wrote:Unfortunately, there is no way to get the SAM file from here to my other computer. No floppy drive on it, and the network won't work on this account.

Take out hard drive, insert in other computer as slave. Copy SAM file off. Crack SAM file. Finis.

The way to do it under Linux would be to mount it in a temporary directory (would require having NTFS alpha write enabled in the kernel if NTFS is what you use), then use NTPASSWD to fix it.

Now, there's also a Linux bootable CD called the Trinity Recue Kit, which comes with all that stuff built-in. The tools are rather cryptic to use, however, since it's a commandline interface, so better read up on the HOWTOs first.

Mitth · Post by **Mitth** » 2004-09-09 01:19am

Crayz9000 wrote:Take out hard drive, insert in other computer as slave.

Done.

Copy SAM file off. Crack SAM file. Finis.

Unfortunately, this computer sees no SAM file. (this Dell is running Win XP Home, if that makes a difference in things).

I am sitting here with this program open, and I have all kinds of pretty hex displayed, labeled as "Master Key" and "Private Key". I'm not sure what to do with it from here.

X_X I used to be computer-literate. *wanders off to find a hex editor*

EDIT: ... I really have no clue what the fuck I'm doing. Anyone have any suggestions to point me in the right direction?

Crayz9000 · Post by **Crayz9000** » 2004-09-09 03:19am

Ok, wait, I'm getting mixed up. I think the files you're looking for are in \Documents and Settings\Administrator\ . NTUSER.DAT is the user's Registry hive, while NTUSER.POL I believe holds that user's policies. The password I think is in NTUSER.DAT.

I'd just as soon use that ntpasswd Pu-239 linked to.

Tribun · Post by **Tribun** » 2004-09-09 09:15am

Well, to try hard to remember usually helps....

Mitth`raw`nuruodo · Post by **Mitth`raw`nuruodo** » 2004-09-09 12:14pm

Hooray! Using the nt password recovery cd pu-239 linked to, I have managed to solve this password problem.

Thanks to everyone who posted here trying to help.

Post by **Ghost Rider** » 2004-09-09 01:13pm

Problem solved

Thread locked.