General discussion

Locked

Account locked out

By KathrynB ·
A client has an NT4 firewall, not part of the domain, with two known accounts: administrator and fwalladmin. No one can find the password for the administrator account, but they know the password for fwalladmin. Problem is, the fwalladmin account has been locked out, and after several days and reboots, the account remains locked. They're on the verge of wiping the machine and having us rebuild it. Anyone have any other suggestions? Is there any way to get into the machine and unlock this account?

This conversation is currently closed to new comments.

15 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Account locked out

by KathrynB In reply to Account locked out

already checked guest account, which is disabled.

Collapse -

Account locked out

by radiic In reply to Account locked out

Did you happen to make a recovery disk with the rdisk /s that puts a copy of the sam database on the diskette. Well if you were lucky enough to do that, you can download a free copy of lophtcrack and run it against the sam database. It usually does a pretty good job.

www.l0pht.com is redirected now to some research company that i think bought them. I have version 2.5 zipped up and would be happy to email it to you if you want. Its just under 1mg big.

Let me know
Rad

Collapse -

Account locked out

by KathrynB In reply to Account locked out

They don't have one -- we've already asked and searched.

Collapse -

Account locked out

by rorycarlin In reply to Account locked out

Try l0phtcrack from www.l0pht.com. It can run a brute force password crack on a copy of the SAM registry found in c:\winnt\system32\config\sam. You'll need to copy this SAM file on to another machine to run l0phtcrack on it.

You'll need to bootthe locked out machine with a DOS boot disk and copy the SAM on to it. If the system partition is NTFS then you'll also need to run NTFSDOS (available from www.sysinternals.com) to let you read and copy the file after booting to DOS.

Hope this helps.

Collapse -

Account locked out

by Shanghai Sam In reply to Account locked out

Thank you!

Collapse -

Account locked out

by SyscoKid In reply to Account locked out

Check out this previously-asked question. It has several good suggestions:

http://www.techrepublic.com/forumqa/thread_detail.jhtml?src=search&thread_id=50046

Collapse -

Account locked out

by SyscoKid In reply to Account locked out

If you copy and paste that URL in your browser, make sure there are no spaces in it. TechRepublic has a tendency to embed spaces where none belong.

Collapse -

Account locked out

by Shanghai Sam In reply to Account locked out

Thanks -- I didn't see this when I looked.

Collapse -

Account locked out

by tamj123 In reply to Account locked out

this is the best NT account hack software and very easy to use.

http://home.eunet.no/~pnordahl/ntpasswd/

Collapse -

Account locked out

by Shanghai Sam In reply to Account locked out

Thanks -- but I'm hesitant to run something I don't trust fully on a firewall.

Back to Windows Forum
15 total posts (Page 1 of 2)   01 | 02   Next

Related Forums