Here is a nice little trick that I read at one time...(This trick really
works)

If you can get into the box (remotely or whatever), change your default
screen saver.
Most all default Screen savers on NT4/2000 are Logon Screen Saver
(%systemdrive%\winnt\system32\logon.src).
Change Logon.scr to something else (Logon.old) and create a copy of
cmd.exe and change it to Logon.scr

Log off the server, or restart the server. When the Screen saver
activates, you have a command shell.
Run 'net user Administrator *' and change your password (or add users,
etc)

***Just remember to rename Logon.old back to Logon.scr***

Good Luck
CJ

-----Original Message-----
From: Deon Grobler [mailto:deonbluewave.com]
Sent: Wednesday, July 04, 2001 04:00
To: FOCUS-MSsecurityfocus.com
Subject: lost NT password

Hiya

This has probably been discussed before, but I please need an urgent
answer. One of our finance servers local NT password was changed and now
we cannot find it. It also does not permit interactive local logon. Is
there any other way I can get into this machine?

NT 4.0 SP 6a

Thanks

Deon Grobler - Senoir Systems Engineer
deonbluewave.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Bluewave Ltd - Online Creations
http://www.bluewave.com
Tel. +44 (0)207 706 3500
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

_________________________________________________________
Do You Yahoo!?
Get your free yahoo.com address at http://mail.yahoo.com

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]