Discussion Locked

bypassing logon in win2k

0 helpful
14 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,
My company unexpectedly fired one of our managers yesterday. When I was asked to retrieve any business info I could off of her PC, I found that her PC was not configured to run on the network. All of her data is on her hard drive. The guestaccount was disabled, and I don't know who set the PC up initially...so I don't know the adminstrator password. I obviously don't know the password of the person fired, either. In Win2000 there doesn't seem to be a way around this, like there is in win98. Any suggestions?

14 replies

by timwalsh

You are correct. Win2K requires you to enter log-on credentials whether the computer is connected to a network or not.

Your easiest solution would be to remove the hard drive, install it as a slave drive in another Win2K computer, and access thehard drive as a secondary drive.

Once you have removed any relevant data, you can reformat the drive, replace it in the original system, and reinstall the OS to meet company requirements.

by timwalsh

I should add that this is the easiest solution assuming the computer is not a laptop!

by joseph moore

Go to this URL:
http://home.eunet.no/~pnordahl/ntpasswd/index.html

And get the Offline NT Password & Registry Editor. This is a Linux boot floppy with its own password cracker. The web page will tell you how to make the floppy. YOu then put the floppy in the PC floppy drive, and boot off of it.
After 2 minutes, it will ask you what password for the local Administrator account you want to use. Type in a password of your choice.
AFter that, remove the floppy and boot normally. YOu can then log in as the local Administrator with the password you supplied!

This is easier than doing a brute force attack (or a dictionary attack). If you want to try one of these methods, let me know.

hope this helps

by beermonster

Hi,
It it's just data you want, you can reinstall the os over the top (ie don't format first), that will leave any flat files intact....

by j.a.lawrence

www.winternals.com

A copy of ERD commander will make a set of bootable floppies to boot the system, change the admin password, copy files off the NTFA partitions, start & stop devices/services.

A pretty good tool to have...

by snis7

hi,
try reboot and f8 command, this will take you to the system, there you can change the admin password.

This discussion is closed to new replies.