W2K3 Server - Password recovery

I heard that you could use sysinternals to launch the
server.  Change the logon screen to cmd.exe, as the
first thing to start is logon.scr.  Then when the
server boots, you will get a command prompt that has
the same security credentials as system.  Thus you can
see the system32 directory and run all the Active
Directory tools as needed.

I haven't tested this, but it makes sense to me.

I'l be testing it sometime this weekend.

--- Steve Snyder <kwajaleingmail.com> wrote:

> very true - if it's a DC he'll want to find somebody
> with a copy of
> l0phtcrack since you can't buy it anymore
> 
> On 6/23/06, Sorin Srbu <sorin.srbuorgfarm.uu.se>
> wrote:
> >
> >  Depending on if the server is a DC or not, the
> tool mentioned below, may
> > not work. DCs are difficult to crack. 
> >
> >  ------------------------------
> > *From
windows2000-bouncefreelists.org [mailto:
> > windows2000-bouncefreelists.org] *On Behalf
Of
> *Steve Snyder
> > *Sent Friday,
June 23, 2006 12:06 AM
> > *To
windows2000freelists.org
> > *Subject
[windows2000] Re: W2K3 Server -
> Password recovery
> >
> >
>
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html<
;http://home.eunet.no/%7Epnordahl/ntpasswd/bootdisk.html>

> >
> > On 6/23/06, Dave Flaim <
> thethincomputervisionaries.com> wrote:
> > >
> > > We have a W2k3 server and the only person
that
> knew the administrator
> > > password has left the company.  Does anybody
> know of a good password
> > > recovery tool - we really don't want to
rebuild
> the machine.
> > >
> > >
> > >
> >
> 


Phil Newberry
Computer Network Engineer Consultant
MCSE NT&2000, MCP+IIS CNA, CAN

Your destiny is in your hands.  Just do it.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection
around 
http://mail.yahoo.com 
*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options 
and info are available at:
http://www.VistaPop.com
***************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net
/win2000list.cfm

Anyluck with this .... ???

Dave

On Sat, 24 Jun 2006, Phillip Newberry wrote:

>
> I heard that you could use sysinternals to launch the
> server.  Change the logon screen to cmd.exe, as the
> first thing to start is logon.scr.  Then when the
> server boots, you will get a command prompt that has
> the same security credentials as system.  Thus you can
> see the system32 directory and run all the Active
> Directory tools as needed.
>
> I haven't tested this, but it makes sense to me.
>
> I'l be testing it sometime this weekend.
>
> --- Steve Snyder <kwajaleingmail.com> wrote:
>
>> very true - if it's a DC he'll want to find
somebody
>> with a copy of
>> l0phtcrack since you can't buy it anymore
>>
>> On 6/23/06, Sorin Srbu <sorin.srbuorgfarm.uu.se>
>> wrote:
>>>
>>>  Depending on if the server is a DC or not, the
>> tool mentioned below, may
>>> not work. DCs are difficult to crack. 
>>>
>>>  ------------------------------
>>> *From
windows2000-bouncefreelists.org [mailto:
>>> windows2000-bouncefreelists.org] *On Behalf
Of
>> *Steve Snyder
>>> *Sent Friday,
June 23, 2006 12:06 AM
>>> *To
windows2000freelists.org
>>> *Subject
[windows2000] Re: W2K3 Server -
>> Password recovery
>>>
>>>
>>
> http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html<
;http://home.eunet.no/%7Epnordahl/ntpasswd/bootdisk.html>

>>>
>>> On 6/23/06, Dave Flaim <
>> thethincomputervisionaries.com> wrote:
>>>>
>>>> We have a W2k3 server and the only person
that
>> knew the administrator
>>>> password has left the company.  Does
anybody
>> know of a good password
>>>> recovery tool - we really don't want to
rebuild
>> the machine.
>>>>
>>>>
>>>>
>>>
>>
>
>
> Phil Newberry
> Computer Network Engineer Consultant
> MCSE NT&2000, MCP+IIS CNA, CAN
>
> Your destiny is in your hands.  Just do it.
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam
protection around
> http://mail.yahoo.com
> *****************************
> New Site from The Kenzig Group!
> Windows Vista Links, list options
> and info are available at:
> http://www.VistaPop.com
> *****************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
>
> http://thethin.net
/win2000list.cfm
>
*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options 
and info are available at:
http://www.VistaPop.com
***************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net
/win2000list.cfm

It is a DC ... DELL server with SATA drives configured for
hardware RAID 
1.

Anybody know where I can get 10phtcrack?


Thanks
Dave


On Sat, 24 Jun 2006, Steve Snyder wrote:

> very true - if it's a DC he'll want to find somebody
with a copy of
> l0phtcrack since you can't buy it anymore
>
> On 6/23/06, Sorin Srbu <sorin.srbuorgfarm.uu.se> wrote:
>> 
>>  Depending on if the server is a DC or not, the
tool mentioned below, may
>> not work. DCs are difficult to crack. 
>> 
>>  ------------------------------
>> *From
windows2000-bouncefreelists.org [mailto:
>> windows2000-bouncefreelists.org] *On Behalf
Of *Steve Snyder
>> *Sent Friday,
June 23, 2006 12:06 AM
>> *To
windows2000freelists.org
>> *Subject
[windows2000] Re: W2K3 Server - Password recovery
>> 
>> http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html<
;http://home.eunet.no/%7Epnordahl/ntpasswd/bootdisk.html>

>> 
>> On 6/23/06, Dave Flaim < thethincomputervisionaries.com> wrote:
>> >
>> > We have a W2k3 server and the only person that
knew the administrator
>> > password has left the company.  Does anybody
know of a good password
>> > recovery tool - we really don't want to
rebuild the machine.
>> >
>> >
>> >
>> 
>
*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options 
and info are available at:
http://www.VistaPop.com
***************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net
/win2000list.cfm

Dave Flaim <> wrote on Monday, June 26, 2006 2:59 AM:

Google? 

> It is a DC ... DELL server with SATA drives configured
for hardware RAID 1.
>
> Anybody know where I can get 10phtcrack?
>
>
> Thanks
> Dave
>
>
> On Sat, 24 Jun 2006, Steve Snyder wrote:
>
>> very true - if it's a DC he'll want to find
somebody with a copy of
>> l0phtcrack since you can't buy it anymore
>>
>> On 6/23/06, Sorin Srbu <sorin.srbuorgfarm.uu.se> wrote:
>>>
>>>  Depending on if the server is a DC or not, the
tool mentioned below,
>>> may not work. DCs are difficult to crack. 
>>>
>>>  ------------------------------
>>> *From
windows2000-bouncefreelists.org [mailto:
>>> windows2000-bouncefreelists.org] *On Behalf
Of *Steve Snyder
>>> *Sent Friday,
June 23, 2006 12:06 AM
>>> *To
windows2000freelists.org
>>> *Subject
[windows2000] Re: W2K3 Server - Password recovery
>>>
>>> http://home.eunet.no/~pnordahl/ntpasswd/
bootdisk.html<http://home.eun
>>> et.no/%7Epnordahl/ntpasswd/bootdisk.html>
>>>
>>> On 6/23/06, Dave Flaim < thethincomputervisionaries.com> wrote:
>>>>
>>>> We have a W2k3 server and the only person
that knew the
>>>> administrator password has left the
company.  Does anybody know of
>>>> a good password recovery tool - we really
don't want to rebuild the
>>>> machine.
>>>>
>>>>
>>>>
>>>
>>
> *****************************
> New Site from The Kenzig Group!
> Windows Vista Links, list options
> and info are available at:
> http://www.VistaPop.com
> *****************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
>
> http://thethin.net
/win2000list.cfm


*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options 
and info are available at:
http://www.VistaPop.com
***************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net
/win2000list.cfm

Phillip Newberry <> wrote on Saturday, June 24, 2006
3:45 PM:

What credentials would this be? The AD restore pwd?

DCs don't have any local account *at all*, so being able to
logon with one of
those is bound to fail. The only way to logon to a DC is
with the root
account. If you forget the pwd for this account, you're
pretty much scr***d.
At least to my knowledge.

Pls let me know if I'm wrong!



> I heard that you could use sysinternals to launch the
server.  Change the
> logon screen to cmd.exe, as the first thing to start is
logon.scr.  Then
> when the server boots, you will get a command prompt
that has the same
> security credentials as system.  Thus you can see the
system32 directory
> and run all the Active Directory tools as needed.
>
> I haven't tested this, but it makes sense to me.
>
> I'l be testing it sometime this weekend.
>
> --- Steve Snyder <kwajaleingmail.com> wrote:
>
>> very true - if it's a DC he'll want to find
somebody with a copy of
>> l0phtcrack since you can't buy it anymore
>>
>> On 6/23/06, Sorin Srbu <sorin.srbuorgfarm.uu.se>
>> wrote:
>>>
>>>  Depending on if the server is a DC or not, the
tool mentioned below, may
>>> not work. DCs are difficult to crack. 
>>>
>>>  ------------------------------
>>> *From
windows2000-bouncefreelists.org [mailto:
>>> windows2000-bouncefreelists.org] *On Behalf
Of *Steve Snyder
>>> *Sent Friday,
June 23, 2006 12:06 AM
>>> *To
windows2000freelists.org
>>> *Subject
[windows2000] Re: W2K3 Server - Password recovery
>>>
>>>
>>
>
http://home.eunet.no/~pnordahl/
ntpasswd/bootdisk.html<http://home.eunet.no/%7E
pnordahl/ntpasswd/bootdisk.html>
>>>
>>> On 6/23/06, Dave Flaim <
>> thethincomputervisionaries.com> wrote:
>>>>
>>>> We have a W2k3 server and the only person
that knew the administrator
>>>> password has left the company.  Does
anybody know of a good password
>>>> recovery tool - we really don't want to
rebuild the machine.
>>>>
>>>>
>>>>
>>>
>>
>
>
> Phil Newberry
> Computer Network Engineer Consultant
> MCSE NT&2000, MCP+IIS CNA, CAN
>
> Your destiny is in your hands.  Just do it.
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam
protection around
> http://mail.yahoo.com
*****************************
> New Site from The Kenzig Group!
> Windows Vista Links, list options
> and info are available at:
> http://www.VistaPop.com
> *****************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
>
> http://thethin.net
/win2000list.cfm


*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options 
and info are available at:
http://www.VistaPop.com
***************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net
/win2000list.cfm