Is there a way to recover a windows 2K server password for the admin account, I know Win NT 4.0 server could be recovered. One of my customers employees quit and changed the Password to the server, and there screwed. It's an NTFS partition.
Printable View
Is there a way to recover a windows 2K server password for the admin account, I know Win NT 4.0 server could be recovered. One of my customers employees quit and changed the Password to the server, and there screwed. It's an NTFS partition.
You might try here:
http://www.sysinternals.com/ntw2k/utilities.shtml
or here http://www.sysinternals.com/win9x/98utilities.shtml
for some neat utilities that might get you what you want.
The alternative is http://www.lostpassword.com
I donīt know how to solve your problem, but this is a tip so the next time you really know who was.
>>>>>>>
Who changed the @!#* administrator's password?
To determine the UserName that changed the Administrator password, perform the following on the PDC:
1. Enable Success and Failure audits for File and Object Access using
User Manager for Domains / Policies / Audit.
2. Using Regedt32, select the SAM key in HKEY_LOCAL_MACHINE and use Security / Permissions
to set Full Control for the Administrators local group. Check Change Permissions on Existing Subkeys.
3. Navigate to HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\0 00001F4, select Security / Audit Permissions
and add the Administrators local group to the list. Select this group and enable Success and Failure auditing
for Set Value events on this and all subkeys.
When a change is made to the Administrator account, the event:
ID: 560
Source: Security
Type: Success Audit
Category: Object Access
will indicate the UserName.
are there any other accounts with admin rights? Log in under one of those and change it
You can also join a domain, then log in as the domain administrator. You should be able to change the local administrators password from a domain controller using a domain admin or enterprise admin account. If you have access to a domain, add this server machine to the domain ACL.
This may be a long shot, but if you have a recovery disk, do a system recovery and the original password will be restored. Past that, ya gonna need a cracka'!
The guy changed the Administrator Account password. The only other account on it are basic users (no rights) and a guest account which is disabled ( I dont know why he disabled it).