One basic issue~~failed login after the rescue

[tsai333]

Hello guys,

I am facing one critical point...if anyone might be able to give me a hint.

My customer crashed their windows NT 4.0 and restored it back with rescue disk. Somehow now noone can really recall the very old username and password, or at least the system failed to login in.

ANY open suggestions??

[SubZero]

Are there any other users with admin priveledges that can logon to the console?

[CJK]

To try and get the username back try this: at a command prompt on another computer that is connected via network with TCP/IP running run this command nbtstat -A [IP address of nt machine]. A list should be displayed with some names. Some of those in there are the names of the user accounts, I forget if there is a way of telling by the number next to them but most likely it will only be a few and guessing should be fine or it will jog your memory. Hope this helps.

[tsai333]

Thanks for those two replies.

Well, we did try whatever we can recall and being returned with C00000DF. It seems NT ddin't take anything..??

[tsai333]

Thanks for those two replies.

Well, we did try whatever we can recall and being returned with C00000DF. It seems NT ddin't take anything..??

[cordon]

Make a bootdisk on another workstation using FAT (win98 or nt). Get this program : http://www.sysinternals.com/ntw2k/fr.../NTFSDOS.shtml
and put it on the bootdisk. You can now boot the server up and read the drives. locate the sam database and copy it to a disk.... If it's too big then you'll need to rig up some sort of network connection, an administrator account will have access to read the sam database.
Go here: http://www.securitysoftwaretech.com/lc3/
and download l0phtcrack and install it on a 'disposable' system (something you don't mind leaving running for days or weeks) and show it the sam database. Run the crack. You'll get a list of the usernames right off.
If this jogs any memories, so much the better.
If not then passwords may take between 5 minutes and several years to extract depending on how complex they are. Enjoy.

[cordon]

http://forums.windrivers.com/cgi-bin...&f=14&t=000617

gives a better solution as well as the l0phtcrack one.