Windows NT/2000 Password Recovery Secrets

I can't tell you how many times I have seen such a scenario, and I can no longer hold back the dark
secret I have kept to myself for several years. Okay, it's not such a secret - the company that makes
the tools we will look at here has been around for several years, and many people have used their
utilities.
To solve our problem, we will use two tools, NTRecover and LockSmith, from Winternals Software. This
company makes system utilities that every Windows admin should be familiar with. Their repair and
recovery tools give you access to NTFS volumes to let you modify the files that are keeping your
systems locked or otherwise unusable. The tools we're using here work together: NTRecover provides
access to the locked-out system, and LockSmith lets you change the password on the Administrator
account.
NTRecover lets you access any unbootable system - locked, dead, or otherwise inaccessible - by
connecting it to a working Windows NT/2000 system with a null modem cable. A special boot diskette
lets you mount the system's drives as volumes on an operational Windows NT/2000 system. You can
then copy, edit, or delete files (for example, those that might be preventing the system from working);
run Locksmith, CHKDSK, Explorer, virus scanners, or other utilities; and salvage files from the system if
needed.
Once you've connected to the locked system with NTRecover, Locksmith lets you specify a new
password for the administrator account. Even if it falls into the wrong hands, however, Locksmith's
powers are well contained: it preserves all attributes of the administrator account and does not change
or destroy any other information on the system.
To continue
Download here