use NTFSprofessional and mount the disk via DOS bootable disk. grab the sam
file and use l0phtcrack to bust the passwords. NTFS professional should be
in any admins toolkit as should l0phtcrack or LC3 or whatever they are
calling it now. I'm going try Torrin's tip on copying logon.src to boot to
dos today to see if that works.

NTFSPro is available here:
http://www.winternals.com/products/repairandrecovery/ntfsdospro.asp

l0phtcrack here:
http://www.atstake.com/research/lc3/download.html

-----Original Message-----
From: Deon Grobler [mailto:deonbluewave.com]
Sent: Wednesday, July 04, 2001 6:00 AM
To: FOCUS-MSsecurityfocus.com
Subject: lost NT password

Hiya

This has probably been discussed before, but I please need an urgent answer.
One of our finance servers local NT password was changed and now we cannot
find it. It also does not permit interactive local logon. Is there any
other way I can get into this machine?

NT 4.0 SP 6a

Thanks

Deon Grobler - Senoir Systems Engineer
deonbluewave.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Bluewave Ltd - Online Creations
http://www.bluewave.com
Tel. +44 (0)207 706 3500
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]