Need to unlock a windows account with an unknown password and do not have a password reset tool? Look no further.
Step 1: Requirements and Intro
You will need the following:
- Linux Live CD (Any Flavor)
- Un-Encrypted Computer
How does it work?
This trick works by replacing the accessibility tools with a high level command prompt and using this to change the password of the account.
Step 2: Boot Linux
Use your CD or USB to boot your Linux installation on the computer with the unknown password.
Step 3: Replace Magnify
Browse with a terminal or a GUI file manager to
“C:\Windows\System32”
Rename “Magnify.exe” to “Magnify.bak”
Copy “cmd.exe” (this is in the same directory)
Rename the copied “cmd.exe” to “Magnify.exe”
Step 4: Boot Windows
Reboot the computer back into Windows mode.
At the login screen you can click on the accessibility controls or press Win+U
Check the box for magnify and then click apply and you should get a command prompt to pop-up.
In the command prompt type the following.
“net user user_name new_password”
Step 5: Test Login
Trying logging in as the user with the password you just set above and you should be ready to rock.
Step 6: Clean-Up
You will most likely want to revert the file changes deleting your copy of command that you renamed to magnify and renaming Magnify.bak back to its original Magnify.exe. If you do not then you are leaving a security hole in that system.
5 Spice ups
That’s nice but you could just replace the utilman.exe and then you get a command prompt straight from your win+U shortcut (ie fewer steps)
That is a really great point. Definitely nice to shave off a few steps!
colttt
(Chuck Ricks)
4
If you already have a Linux Live CD then why don’t you have a password reset tool? Also, if my drive is encrypted, is there any way to change the password?
I have a USB with DSL on it. There is not a build in password reset tool on that distro. For my job I often end up on site with no internet access but need to get into a computer. Plus it is always good to know another way to break in if you needed to.
or you can use konboot cd and boot up from it . All you have to do is press enter for the password to get into that profile.
This will come in quite handy to know… I’ve come across many instances where people have asked me to reset their password on home systems. At work it’s so much easier to do with AD
If only I could set up my private/residential clients with AD… lol
Want to do Windows password reset? A Windows Password Recovery Tool can help you.