Recover Administrator account

Discussion in 'Server Security' started by Niklas, Nov 2, 2004.

  1. Niklas

    Niklas Guest

    Hi,

    I need help quick!!! Need to recover the administrator account because
    someone changed it and no onw knows it. How do I do this??

    Regards
    Niklas
     
    Niklas, Nov 2, 2004
    #1
    1. Advertisements

  2. Niklas

    Niklas Guest

    Forgot...

    It´s an Windows 2000 Server.

    Can I extract the sam file somehow. where is the sam database or is it some
    other files I need. Might be able to crack the files with 3rd party
    programs.

    Please help!!
     
    Niklas, Nov 2, 2004
    #2
    1. Advertisements

  3. Steven L Umbach, Nov 2, 2004
    #3
  4. Niklas

    Niklas Guest

    I have a backup of the server, Can´t I restore the registry or what will not
    work?

    Regards
    Niklas
     
    Niklas, Nov 2, 2004
    #4
  5. Niklas

    Niklas Guest

    Strange, I took the SAM file and the SYSTEM file from the backup and I see
    that the administrator account is disabled. How could it get disabled. Well,
    I did´nt get the first NT offline password changer working. See if I can get
    some other tool working.
     
    Niklas, Nov 2, 2004
    #5
  6. If it is the "domain" admin password then hacking the local sam of a domain
    controller alone will not work but the link I provided does show how to
    recover the domain administrator account also which I tired once on a test
    network and it did work. For Windows 2000 non domain controller you can also
    rename the sam account from outside the operating system [using parallel
    install/ntfs boot disk/hard drive in another computer] and reboot the
    computer which will create a new sam with the administrator account having a
    blank password. The downside of that is you will be left with only default
    users and groups. Strange that the built in administrator account is
    disabled as I have never seen that on Windows 2000 for a local keyboard
    logon. It can be disabled in Windows 2003 but if you boot into safe mode it
    is available. The link below also has more tips. --- Steve

    http://securityadmin.info/faq.asp#password
     
    Steven L Umbach, Nov 2, 2004
    #6
  7. Niklas

    Niklas Guest

    thx, It seems that the administrator account was not disabled, I think the
    program I used said that it was but it was´nt.

    Anyway I bought a program called Emergency Repair Disk 2003 from
    www.winternals.com and it took me about 15 minutes to burn a cd with the
    raid controllers drivers on it and boot on that cd and change the
    administrator accounts password. It´s a fantastic program. I love it :)

    Regards
    Niklas

     
    Niklas, Nov 5, 2004
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.