unknown password, what to do? 1

[Ovatvvon]

Hey, I just got a win2k server machine from my father-in-law who said he doesn't need it anymore and I could use it for experimentation, but he doesn't remember the password for the admin account. Is the only way to regain access to the machine to be by reloading the operating system and wipeing everything clean? Or can I still get access some how and mess around and learn from web files and such that was left on there? (I tried booting via DOS, but it's using NTFS) -Ovatvvon :-Q

 

[WillShakespeare]

Essentially, you will have to either reset the password, or crack it! EIther way, you are going to have to boot to a command prompt. But as you have discovered you cannot use DOS as it won't see the NTFS volumes. There are plenty of NTFS and Linux boot disks that will help. Without repeating much of the information available, this link goes to a fantastic site that not only will help you recover your system, but introduce you to some new information that will help you in your tinkering (getting to know how W2K works, and how you can control it from outside in):

http://www.ntsecurity.net/Articles/Index.cfm?ArticleID=9527

Will

 

[Ovatvvon]

Thanks will. Your link provided a lot of information and led me to others with additional information. I think this will help a lot!
-Ovatvvon :-Q

 

[WillShakespeare]

You're very welcome!

Try this too...

http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

linked from here:

http://archives.neohapsis.com/archives/sf/forensics/2001-q1/0134.html

Will