[HELLBRINGER]

Is there any sort of password recovery or anything on Win2k Server? I changed my password on my admin account about a week ago. And I am sure I remember it, but it is not working. What can I do?

Thanks.

[Davros]

Maybe you had allcaps on when you changed it.

[HELLBRINGER]

Its numeric... Only numbers. I don't know what I could of chaged it to. I have been in it a few times after I changed it, and I remember the password, it's just not working now. I hope someone doesnt have a key reader and changed it later.

So I am assuming there is nothing I can do? I will have to reformat? I was trying to use my account to get in since my username is an admin, but it was not working either. Kind of angering me because I need to get to the server.

[Davros]

If Windows 2000 is installed on a FAT or FAT32 file system:
Start the computer using an MS-DOS or a Microsoft Windows 95/98 startup disk.


Copy the original SAM saved during the initial Windows 2000 installation in the %SystemRoot%\Repair folder to the %SystemRoot%\System32\Config folder.


If Windows 2000 is installed on an NTFS file system:
Either move the drive to another Windows 2000-based computer or perform an additional installation of Windows 2000 (parallel install) to gain access to the NTFS partition.


Copy the SAM in the %SystemRoot%\Repair folder to the %SystemRoot%\System32\Config folder.


NOTE : This method is useful only if you remember the original Administrator password you used during the initial installation of Windows 2000.

[HELLBRINGER]

Oh yes the sam file I remember that. But doesn't that contain encrypted passwords? I assume there is likley a way to crack that as I have heard of it being done.

Now that I think about it, I can take the drive out, put it my comp (since it is a NTFS partition), and get the sam file. I do know the password when I installed the OS. So how exactly do I get into my server once I have the sam file?

Thanks, going to get the same file now...

[Davros]

The sam file in the Repair folder is from the first boot I beleive, so if you copy this one over the current sam in use, account passwords created since then will be lost. And you can't recreate the exact same accounts again b/c the SID will be different. It might be better to search the net for a password recovery tool. I know there's lots of them around, most of which you have to pay for.
No matter what you do, make a backup copy of your sam file first!

[HELLBRINGER]

The sam file in the repair folder, does it contain all my accounts? If I copy it over the sam file in the root/system32/config/ will I still be able to use the Administrator account?

The password was about 43 characters BTW... I don't think anything can crack that... Is there anything that can?

[Davros]

You can use Winternals Locksmith. It will allow you to change the password for any account on any drive you are not currently running your os from. A 6 year old could use it! I just tested it on my Win2K Advanced Server, with great success. Check your private messages and email me at that address!