Eagle 1

Lost Administrator Password

24 posts in this topic

My Grandson password protected Windows XP on his new laptop. He cannot remember the Administrator password that he used.

I emailed Acer but they didn't bother to reply. I have downloaded several free, so called fixes, and burned ISO files. They don't interrupt the boot and the XP password screen still comes up. I bought one program but it wouldn't open all the way and at one point, we only get "Bad Command" in the upper corner of a blank screen. That company gave me my money back. WOW.

The opening Windows screen shows two accounts, Administrator and Guest. I can open Windows Guest account but the guest has no permission to change anything. It is very limited.

HELP!!! Hope someone in the forum can show me how to get into XP and get rid of that blasted password requirement.

Since we didn't get an XP disk with the computer, I can't reload Windows and he also doesn't want to lose what he already has on it. He hasn't been able to use his laptop for over two months.

Thanks,

Eagle 1 :(

0

Share this post


Link to post
Share on other sites
...I have downloaded several free, so called fixes, and burned ISO files. They don't interrupt the boot and the XP password screen still comes up.

You need to enter the BIOS setup as the machine is booting (it will tell you what key to press to enter setup. Sometimes it will only flash for a second though, so you'll have to be quick). Once in the BIOS setup, look for a section that pertains to your boot sequence. In that section you will see (probably) a numbered list of devices, such as: Hard Drive, CD-ROM, Floppy, etc. Make sure CD-ROM (or DVD whatever) is the first in the list, which means it will be looked to first in the boot sequence, before the hard drive. This is necessary to be able to boot up into a Live CD, which is what I'm assuming you are talking about when referring to "ISO files".

0

Share this post


Link to post
Share on other sites

To MAD JIMI SIMI :)

Thanks for the reply. That was done in the very beginning. The cd rom drive was setup in the BIOS to run first. Any other ideas?

To TEHBIZZ (w/o a "c") :(

Guess you have heard about everything. Sorry you think it sounds fishy.

I'm just a grandpa trying to help my 15 year old grandson be able to use

the laptop that my wife gave him last December. Thanks anyway for the

reply.

0

Share this post


Link to post
Share on other sites

To WhatChout :)

Thanks for the link. I went to it but don't have time to read through it now.

Will have to work on it later.

Eagle 1

0

Share this post


Link to post
Share on other sites

Well Hrmmm ... the Answer is easy enough, and I agree, this sounds fishy ...

0

Share this post


Link to post
Share on other sites

All you need to do is go to safety mode (F8 on bootup) and change the password

Also you can try pressing Ctrl+Alt+Del twice and for the default administrator, at the login screen.

0

Share this post


Link to post
Share on other sites
To WhatChout :)

Thanks for the link. I went to it but don't have time to read through it now.

Will have to work on it later.

Eagle 1

You don't have to read pretty much. Ophcrack is automatic.

0

Share this post


Link to post
Share on other sites

Eagle1, understand that these forums are inundated with new members seeking "help" in the same way you are. In many cases, their intentions are not honorable. And they all have a story like yours.

The hacker community is often misrepresented and misunderstood by the general public, no thanks to the media or government, and the term "hacker" is so often synonymous with "criminal". The members of this community have no desire to perpetuate this stereotype by helping mischevious individuals with ill-intentions. That being said, you will encounter a fair amount of skepticism with this type of request.

My advice to you would be to seek out a data recovery specialist/company in your area. If the data on this computer that your grandson needs is so important, then it will be worth shelling out a few dollars to get it back. Otherwise, reinstall Windows and start with a clean slate.

I am giving you the benefit of the doubt that your story is legitimate. If it's not, and you are some kid who has the curiosity bug in the area of computer security, channel that into something productive: educate yourself, seek knowledge, experiment, but above all, do not ask someone to do it for you. Shortcuts and laziness are the path to script-kiddiedom. So is lying.

0

Share this post


Link to post
Share on other sites
Eagle1, understand that these forums are inundated with new members seeking "help" in the same way you are. In many cases, their intentions are not honorable. And they all have a story like yours.

The hacker community is often misrepresented and misunderstood by the general public, no thanks to the media or government, and the term "hacker" is so often synonymous with "criminal". The members of this community have no desire to perpetuate this stereotype by helping mischevious individuals with ill-intentions. That being said, you will encounter a fair amount of skepticism with this type of request.

My advice to you would be to seek out a data recovery specialist/company in your area. If the data on this computer that your grandson needs is so important, then it will be worth shelling out a few dollars to get it back. Otherwise, reinstall Windows and start with a clean slate.

I am giving you the benefit of the doubt that your story is legitimate. If it's not, and you are some kid who has the curiosity bug in the area of computer security, channel that into something productive: educate yourself, seek knowledge, experiment, but above all, do not ask someone to do it for you. Shortcuts and laziness are the path to script-kiddiedom. So is lying.

I agree for the most part. Except for lying. Lying can = Social Engineering, which, IMO, is a reputable part of being a hacker or even a phreaker. If you can SE, you can do damn near everything. Mitnick, for example.

Anywho, figured that was important to raise an eyebrow at.

As for the main topic: Live Linux, copy SAM and SYSTEM, boot another computer, use Cain to crack it. Something along those lines...

0

Share this post


Link to post
Share on other sites

It has happened to me too and I didn't have the boot disk to restore my password. Recently I found a great solution for this problem in a tech support site. Here is the solution for this problem - Windows XP lost password

Hope it helps

Lee

0

Share this post


Link to post
Share on other sites

May I suggest Hiren's Boot CD

0

Share this post


Link to post
Share on other sites

Go to a local computer shop that serivces computers, ask if you could borrow(for a small fee) there WINDOWS XP SP2 OEM cd.

Next make sure you computer boot from a cd in bios. Boot off the win xp cd when it comes up with the option for recovery console or contiune, press enter. Next when it asks press R for repair, this want delete any date just reload window files. The computer when loaded the startup files will reboot when it starts up again and you see like 39mins to go press Shift + F10, a DOS prompt will show up then type nusrmgr.cpl the windows user account program opens, you don't need to enter a password to change one so Just change it.

Hope it helps

Edited by orion
0

Share this post


Link to post
Share on other sites
Go to a local computer shop that serivces computers, ask if you could borrow(for a small fee) there WINDOWS XP SP2 OEM cd.

Next make sure you computer boot from a cd in bios. Boot off the win xp cd when it comes up with the option for recovery console or contiune, press enter. Next when it asks press R for repair, this want delete any date just reload window files. The computer when loaded the startup files will reboot when it starts up again and you see like 39mins to go press Shift + F10, a DOS prompt will show up then type nusrmgr.cpl the windows user account program opens, you don't need to enter a password to change one so Just change it.

Hope it helps

i was under the impression that when you enter recovery console, you get prompted for the admin password to proceed after selecting which windows install you will work on?

0

Share this post


Link to post
Share on other sites

its not the recovery console you go into. You press R to go into the recovery console, but to do this you press enter, then press R. When you press enter it should detect that you have a previously installed OS, then you select repair.

Edited by orion
0

Share this post


Link to post
Share on other sites

Ahhhh Screw it ...

Drop Win XP in CD / DVDRom

Format ..

Install Win XP Clean, Now you are Admin ... w00t w00t ...

Recover My Files ... Simple program to use ...

Guess what .. You have all your files, and you didn't hack shit ...

0

Share this post


Link to post
Share on other sites

And just by using CHNTPW (mentioned earlier), you don't need to go to the local computer shop and waste your time.

0

Share this post


Link to post
Share on other sites

I think you can use knoppix to delete the hash and make XP think the account doesn't have a password, but I forget the exact path.

Also, knoppix STD has a tool that can reset windows passwords.

0

Share this post


Link to post
Share on other sites

I got a trick if u have the Intalation Disk... i got this long time ago in a web so i don't know if stills works

This won't let u see the password but at least u can set a new one

Not necessary because you can easily change or wipe out your Administrator password for free during a Windows XP Repair. Here’s how with a step-by-step description of the initial Repair process included for newbie’s.

1. Place your Windows XP CD in your cd-rom and start your computer (it’s assumed here that your XP CD is bootable – as it should be - and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd Typically, it will be “Press any key to boot from cd”

3. Once you get in, the first screen will indicate that Setup is inspecting your system and loading files.

4. When you get to the Welcome to Setup screen, press ENTER to Setup Windows now

5. The Licensing Agreement comes next - Press F8 to accept it.

6. The next screen is the Setup screen which gives you the option to do a Repair.

It should read something like “If one of the following Windows XP installations is damaged, Setup can try to repair it”

Use the up and down arrow keys to select your XP installation (if you only have one, it should already be selected) and press R to begin the Repair process.

7. Let the Repair run. Setup will now check your disks and then start copying files which can take several minutes.

8. Shortly after the Copying Files stage, you will be required to reboot. (this will happen automatically – you will see a progress bar stating “Your computer will reboot in 15 seconds”

9. During the reboot, do not make the mistake of “pressing any key” to boot from the CD again! Setup will resume automatically with the standard billboard screens and you will notice Installing Windows is highlighted.

10. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

11. At the prompt, type NUSRMGR.CPL and press Enter. Voila! You have just gained graphical access to your User Accounts in the Control Panel.

12. Now simply pick the account you need to change and remove or change your password as you prefer. If you want to log on without having to enter your new password, you can type control userpasswords2 at the prompt and choose to log on without being asked for password. After you’ve made your changes close the windows, exit the command box and continue on with the Repair (have your Product key handy).

13. Once the Repair is done, you will be able to log on with your new password (or without a password if you chose not to use one or if you chose not to be asked for a password). Your programs and personalized settings should remain intact.

I tested the above on Windows XP Pro with and without SP1 and also used this method in a real situation where someone could not remember their password and it worked like a charm to fix the problem. This security hole allows access to more than just user accounts. You can also access the Registry and Policy Editor, for example. And its gui access with mouse control. Of course, a Product Key will be needed to continue with the Repair after making the changes, but for anyone intent on gaining access to your system, this would be no problem.

And in case you are wondering, NO, you cannot cancel install after making the changes and expect to logon with your new password.

Cancelling will just result in Setup resuming at bootup and your changes will be lost.

Ok, now that your logon problem is fixed, you should make a point to prevent it from ever happening again by creating a Password Reset Disk. This is a floppy disk you can use in the event you ever forget your log on password. It allows you to set a new password.

Hope this help you.

(sorry for my bad english)

0

Share this post


Link to post
Share on other sites

Why is this such a long, drawn out thread? The first response (ophcrack suggestion) is by far the easiest and least fuck-up-able way to go. Either that or use EBCD or Hiren's to blank the pw out. Why would you want to go through some complex Windows setup hack when you can use some of the already mentioned methods that are perfectly fine? The guy clearly knows how to burn iso's so it shouldn't be a problem.

Either that or take the computer to any repair shop. If they can't reset the password in a few minutes, they don't deserve to be in business.

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now