Used offline password reset tool with no success

[John Munsey Jr]

Used offline password reset tool with no success

I got a hold of an XP box with an unknown administrator password.

I ran this tool and another similar -
http://home.eunet.no/~pnordahl/ntpasswd/editor.html

It boots Linux on a floppy and allows you to reset the passwords on
accounts. I tried this and did it correctly afaik but the new
password did not work. Next, I disabled syskey as there were no
important accounts to worry about and then reset the password again.

I tried both the blank password option and the word "password" but no
success.

When I run LC5 on the SAM it shows almost immediately the LM Password
to be "PASSWORD" in all caps - this does not work either. I have not
done a full brute force scan - that is running now.

I am at a loss. I researched the use of these tools with many people
saying they worked great, but not for me

Any idea why I cannot log in?

Thanks

John M

 

[PsyB]

Try here:

http://www.openwall.com/john/

 

[John B.]

I use Winternal's ERD Commander. It has a utility called Locksmith that
works geat for resetting lost passwords.
http://www.winternals.com/products/repairandrecovery/index.asp?pid=ap#erd

John B.

 

[John]

I have used this tool succesfully on both win2k/xp using the blanking
option...all i can suggest is be sure you are working with the admin accnt,
and you are using * (if i remember right) to blank it. I am going to install
WINXP in VMware right now to test.

 

[John]

Hi John,
I just tested offline password changer on XP pro and it worked like a
charm...I reset both the built-in ADMIN account and another admin accnt I
created. In fact I was locked out of the second admin accnt and it even
reset it for me. Be sure to choose the blank password option and as you know
it offers you choices by default e.g. [adminsitrator] , make sure you select
Yes at the end to rewrite the SAM. By default it has [n] as the choice. Once
the SAM is rewritten, give it the old 3 finger salut and voila!
good luck

 

[John Munsey Jr]

I did it just the same as you but no success, and that is why I came
here. I don't get it, I researched the tool before I used it and was
so confident it would work I didn't even backup my SAM.. I know the
box I am working on had some local security policies enabled but that
shouldn't make a difference afaik..

Anyway this box was accessible using a restricted account before I did
this but now not even that is available (since I disabled syskey I
guess).

Also an LC5 run on the SAM yielded blank passwords for that restricted
account but no dice..

So, I am stumped and if the other tools available don't work will
probably have to reinstall XP and restore files (on my dollar )

Thans for the help.