Re: retrieving SAM from mirrored system volume

From: chris@nospam.com
Date: 03/20/03


From: chris@nospam.com
Date: Wed, 19 Mar 2003 21:51:05 -0800

On Thu, 20 Mar 2003 14:31:20 +0930, "Jamie Byrnes"
<jabyrnes@remove.giantsreef.com.au> wrote:

>
><chris@nospam.com> wrote in message
>news:eg9i7v0cfarhsv24rtp7cg8lhro9l08t6o@4ax.com...
>> On Thu, 20 Mar 2003 09:29:15 +0930, "Jamie Byrnes"
>> <jabyrnes@remove.giantsreef.com.au> wrote:
>>
>> >Hi there,
>> >
>> >I have to retrieve some data from an old NT4 sp6 server from a company
>we've
>> >taken over, and I don't have access to the admin password. So I jumped on
>> >with my copies of ntfs4dos and l0phtcrack in hand only to find ntfs4dos
>> >wouldn't recognize any ntfs partitions.
>> >
>> >Using PM8.0 I saw that the system volume was mirrored across 2 old 2gig
>> >disks, so I assume this is the problem. System does boot OK so its not a
>> >BIOS problem. Tried both ntfs4dos 3.5 and 4pro.
>> >
>> >Does anyone know a way around this?
>>
>>
>> Yes, just change the admin password using this very handy tool:
>> http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html
>
>Thanks Chris!
>
>Even though the web pages says it probably won't work with soft mirrors, it
>actually worked great. Not so sure how it'd go with stripes though. A bit
>worried about unsupported code writing to the SAM, but it solved my problem.
>
>
>Jamie.

Should work fine on software mirrors. The FT driver resynchonizes the
mirrors once it loads. Since it doesn't load early on, there are
always files out of synch during the boot, including the registries.

Not an issue for software stripes since the boot/system partitions
can't be on software based stripes. Chicken before the egg problem.

Glad it solved your problem. I assume you now keep that disk with
your other recovery tools. :}

-Chris



Relevant Pages

  • Re: Raid Configuration
    ... On 07/29/2004 02:20 PM, Si Jones wrote: ... > software raid in FC, ... A lot of people are saying mirrors are faster for read, and stripes are ...
    (Fedora)
  • Re: What would you have done?
    ... > scratches down LOADS of cars. ... Electric, heated, body coloured mirrors. ...
    (uk.rec.driving)