Lost XP Password

reicherb

Platinum Member
Nov 22, 2000
2,122
0
0
I've got a client with a WinXP Pro PC with one user account who forgot the password to login. Is there anyway to get around the login?

Thanks.
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
Originally posted by: reicherb
I've got a client with a WinXP Pro PC with one user account who forgot the password to login. Is there anyway to get around the login?
Thanks.

Does he remember the administrator login? If so, you can login that way and change the user account password. I know you said 'one user account', but the administrator account will be hidden from the login screen once he created his first 'user account'.

Bill


 

Need4Speed

Diamond Member
Dec 27, 1999
5,383
0
0
Well I'm glad to see there was no one in here saying that he was SOL and had to reformat :) just because he lost the password.

The linux boot disk is a great way to reset the admin password.
 

Pauli

Senior member
Oct 14, 1999
836
0
0
Doesn't this incredibly huge security hole bother anyone? I know physical access to the machine is needed to make this work, but still!
 

Gooberlx2

Lifer
May 4, 2001
15,381
6
91
IIRC he could use a windows 2000 disk to gain superuser access to the recovery console on a WinXP machine as well, right?
 

JackBurton

Lifer
Jul 18, 2000
15,993
14
81
IIRC he could use a windows 2000 disk to gain superuser access to the recovery console on a WinXP machine as well, right?
No password, no get in. (well without hacking) ;)
Doesn't this incredibly huge security hole bother anyone? I know physical access to the machine is needed to make this work, but still!
Dude, this has been around for awhile. If it makes you feel any better, in a work environment, lock the case, have the system boot to hard disk ONLY, and password protect the BIOS. ;) You can still get in but if you change the password using this program and the admin or system guys find out, have a policy to fire on the spot. You can only change the password, you can't find out what the original was. :) This also doesn't work on Windows 2000 Server/.Net machines running Active Directory. ;)
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
Originally posted by: Need4Speed
Welcome to the world of Microsoft :)

I realize it's cute to MS bash, but do it when it only applies to them. Physical access issue are OS independant, linux and other system have the same issues. You can encrypt your data to prevent access after this type of local attack, of course if you lose your admin account (or someone resets it like this, you won't recover the data)

Bill
 

Spyro

Diamond Member
Dec 4, 2001
3,366
0
0
Originally posted by: bsobel
Originally posted by: Need4Speed
Welcome to the world of Microsoft :)

I realize it's cute to MS bash, but do it when it only applies to them. Physical access issue are OS independant, linux and other system have the same issues. You can encrypt your data to prevent access after this type of local attack, of course if you lose your admin account (or someone resets it like this, you won't recover the data)

Bill

Actually my local passwords are encrypted, and I wouldn't dare have it otherwise. Of course, if somewone tried hard enough the encryption could be broken, but since this actually requires someone to be at my PC, then this really doesn't matter.

Compare that to someone popping in a disk and then running :D.

Edit: Blasted qwerty......
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
Actually my local passwords are encrypted, and I wouldn't dare have it otherwise. Of course, if somewone tried hard enough the encryption could be broken, but since this actually requires someone to be at my PC, then this really doesn't matter.

And so are the XP ones, what was your point? If I mount your file system and replace your password file (basically what is being suggested to fix the xp box here), I don't care what your passwords where or the fact that I can't get at them.

Bill

 

Need4Speed

Diamond Member
Dec 27, 1999
5,383
0
0
Originally posted by: JackBurton
Welcome to the world of Microsoft
EVERYTHING can be hacked! Welcome to the world of zeros and ones. :)

True. Some easier than others :)

Originally posted by: bsobel
Originally posted by: Need4Speed
Welcome to the world of Microsoft :)

I realize it's cute to MS bash, but do it when it only applies to them. Physical access issue are OS independant, linux and other system have the same issues. You can encrypt your data to prevent access after this type of local attack, of course if you lose your admin account (or someone resets it like this, you won't recover the data)

Bill

Whose bashing? Sometimes a joke is just a joke you know. I'm not going to get into about how I think winxp is the greatest windows ever and that even *nix has their security problems etc etc., because IMHO Bill Gates and Co. has earned a bit of bashing now and then. Therefore, I will bash MS whenever I please.

My original comment was meant to hint at the irony of using a linux disc to circumvent the all powerful NT Security.

It's too early for me to argue about this....
 

mboy

Diamond Member
Jul 29, 2001
3,309
0
0
cia commander is also a nice tiny little proggie that will let u boot to floppy and basically wipe out your sam file, users, etc and reset passwords.
 

Spyro

Diamond Member
Dec 4, 2001
3,366
0
0
Originally posted by: bsobel
Actually my local passwords are encrypted, and I wouldn't dare have it otherwise. Of course, if somewone tried hard enough the encryption could be broken, but since this actually requires someone to be at my PC, then this really doesn't matter.

And so are the XP ones, what was your point? If I mount your file system and replace your password file (basically what is being suggested to fix the xp box here), I don't care what your passwords where or the fact that I can't get at them.

Bill

Actually, I know that.
 

Need4Speed

Diamond Member
Dec 27, 1999
5,383
0
0
Originally posted by: wizardLRU
Originally posted by: bsobel
Actually my local passwords are encrypted, and I wouldn't dare have it otherwise. Of course, if somewone tried hard enough the encryption could be broken, but since this actually requires someone to be at my PC, then this really doesn't matter.

And so are the XP ones, what was your point? If I mount your file system and replace your password file (basically what is being suggested to fix the xp box here), I don't care what your passwords where or the fact that I can't get at them.

Bill

Actually, I know that.

Nice link...
 

btalbott

Member
Mar 14, 2001
41
0
0
What security hole? If you have physical access to a machine, then that's your lack of security.

Bill
 

crantang

Senior member
Mar 7, 2001
374
0
0
Hi everyone

I lost my XP password yesterday; I've been reading this thread but don't understand what to do. Can someone help?

Thanks,
Cathy
 

CarltheUnholy

Member
Apr 13, 2003
26
0
0
Heh, this is a workaround, although it's one MS won't want you to know. If you have an XP machine, and you've lost a password, boot with a 2K cd. HUGE security hole. You can access all accounts, including Administrator.