Windows Forum

Ask something
Discussion Locked

Recover win 2K domain admin pass

0 helpful
7 replies

by mihai.p 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I want to recover (replace) a lost domain administrator password (for free). I don't have another admin user in the domain.
(i need something like ntpasswd - which can reset passwords from SAM). The DC doesn't have syskey applied.

7 replies

by dragon_45

Go to this URL:
http://home.eunet.no/~pnordahl/ntpasswd/index.html

And get the Offline NT Password & Registry Editor. This is a Linux
boot floppy with its own password cracker. The web page will tell
you how to make the floppy. You then put the floppy in the PC
floppy drive, and boot off of it.
After 2 minutes, it will ask you what password for the local
Administrator account you want to use. Type in a password of your
choice.
After that, remove the floppy and boot normally. YOu can then log
in as the local Administrator with the password you supplied!

by jasonschambers

I do not want your points because I don't care about points, I am just trying to lead you in the right direction. If you want the password you will need to slave it to a linux box and use the "brute force attack" against the SAM database. I have sucessfully done this once and it took me 4 hours to do it. It was the Domain password that I got but I also had to change it out with a binary file(which means it is important that you replace the file with a binary file. If you cannot slave the drive because of raid or SCSI reasons you can always connect accross the netwrok and do the same thing. I hope you have linus experience though, because you will need it. Go buy your self a lot of coffee and be ready to be frustrated but you will get it. Good luck, and I am looking forward to you rejecting my answer!

by acattr

You can crack it with a Linux NT Cracker boot disk. You simply pop in the booddisk, it will ask you which account password you want to change, and your done. Try it on a workstation first to be safe.

go to
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

download the three files at bottom of page. use dos utility(rawwrite2.zip) to create boot disk. run it.

NOTE THAT THE BOOTDISK CONTAINS CRYPTHOGRAPHIC CODE, and that it may be ILLEGAL to RE-EXPORT it from your country.

by mihai.p

as i said before it can change local admin pass not domain admin pass which is stored in Active Directory

This discussion is closed to new replies.