Windows 2000 Server Password Lost

[Web Master]

Is there a way to recover a windows 2K server password for the admin account, I know Win NT 4.0 server could be recovered. One of my customers employees quit and changed the Password to the server, and there screwed. It's an NTFS partition.

[bdunn]

You might try here:
http://www.sysinternals.com/ntw2k/utilities.shtml

or here http://www.sysinternals.com/win9x/98utilities.shtml

for some neat utilities that might get you what you want.

The alternative is http://www.lostpassword.com

[TECNICOS]

I don´t know how to solve your problem, but this is a tip so the next time you really know who was.
>>>>>>>

Who changed the @!#* administrator's password?

To determine the UserName that changed the Administrator password, perform the following on the PDC:
1. Enable Success and Failure audits for File and Object Access using
User Manager for Domains / Policies / Audit.

2. Using Regedt32, select the SAM key in HKEY_LOCAL_MACHINE and use Security / Permissions
to set Full Control for the Administrators local group. Check Change Permissions on Existing Subkeys.

3. Navigate to HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\0 00001F4, select Security / Audit Permissions
and add the Administrators local group to the list. Select this group and enable Success and Failure auditing
for Set Value events on this and all subkeys.

When a change is made to the Administrator account, the event:

ID: 560
Source: Security
Type: Success Audit
Category: Object Access

will indicate the UserName.

[weazel]

are there any other accounts with admin rights? Log in under one of those and change it

[Ron Prestenback]

You can also join a domain, then log in as the domain administrator. You should be able to change the local administrators password from a domain controller using a domain admin or enterprise admin account. If you have access to a domain, add this server machine to the domain ACL.

[Snommis69]

This may be a long shot, but if you have a recovery disk, do a system recovery and the original password will be restored. Past that, ya gonna need a cracka'!

[Web Master]

The guy changed the Administrator Account password. The only other account on it are basic users (no rights) and a guest account which is disabled ( I dont know why he disabled it).