Re: Big Virus Password problem

From: Herb Martin (news_at_LearnQuick.com)
Date: 10/20/03 

Date: Mon, 20 Oct 2003 11:03:56 -0500

> > Hello all. My old boss has a windows 2000 server that might have a
virus

> If your boss has another user account with administrator privledges, he
can
> reset the administrator password by using the local users and groups tool
> under 'computer management' in Administrative tools.

Only if it isn't a DC.

Another choice is to add another copy of Win2000 and access the SAM, or
copy it to another machine, to bust it.

Anything that lets you copy the SAM will work. 

-- 
Herb Martin

Relevant Pages

  • Re: MAJOR SECURITY FLAW IN WINDOWS XP - RESET ADMIN PASSWORD
    ... if you are afraid of this threat, you should use SYSKEY to protect your SAM ... Note that your attack on XP does not expose any user secrets or private ... > allows you to set the administrator password to anything ... > how to reset a corrupted registry. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help me unlock Administrator account in SAM?
    ... Well, the first thing is, domain accounts are not kept in SAM, instead, ... Active Directory and encrypted by its unique formation and If the box ... > change the Administrator password, but I don't own any of them. ...
    (microsoft.public.security)
  • Re: Administrator Password
    ... This will cause the server to default to no password for the ... administrator account. ... you can copy the sam out and run Loft against it to see if you can ... filter the administrator password. ...
    (microsoft.public.win2000.security)
  • Re: Uh Oh! Password Forgotten!!??
    ... Install another hard drive with a win2k on it ... then access the "old" drive looking for the _sam ... extract the administrator password from the security ...
    (microsoft.public.win2000.security)
  • Lost Administrator password
    ... Now take out hard disk and reinstall it to your PC.BOOt ... HERE IT CREATS NEW SAM FILE. ... >The Administrator password on my PC was changed ... How can I bypass or force reset the ...
    (microsoft.public.win2000.security)