Hi I need to change a Windows 7 password(not on a domain) from the guest account, I have tried this
* Go to C:/windows/system32
* Copy cmd.exe and paste it on desktop
* rename cmd.exe to sethc.exe
* Copy the new sethc.exe to system 32,when windows asks for overwriting the file,then click yes.
When asked to overwrite,overwrite the sethc.exe
* Now Log out from your guest account and at the user select window,press shift key 5 times.
* Instead of Sticky Key confirmation dialog,command prompt with full administrator privileges will open.
* Now type “ NET USER ADMINISTRATOR lifestyle” where “lifestyle” can be any password you like and press enter.
* You will see “ The Command completed successfully” and then exit the command prompt and login into administrator
with your new password.
* Congrats You have hacked admin from guest account.
But obviously do not have permission to change files from the guest account within the system 32 file… I then tried to copy the file frim command prompt by got an access denied error… I have also seen ways of doing this with a Windows disc, but i do not have one available…
Do you know of any way I can get this to work? Or a different method? I need to access the user files ultimately, so if there’s another way of accessing them without changing the password that would also be good.
Thanks for your help.
Lorraine
4 Spice ups
cappilio
(cappilio)
2
As far as im aware from a guest account you have no chance. You probably want to use the NT Password Recovery Tool
1 Spice up
Try this:
http://www.hiren.info/pages/bootcd-on-usb-disk
You just need to boot your PC to USB, jump into BIOS / bootup device sequence.
Thanks guys, but I have no way of getting the user to access the internet as the guest account wont allow internet connection… any other ideas? Thanks!
ntholomew
(Ntholomew)
5
Hirens is definitely the answer. Use the Hiren’s Boot CD, use the offline password changer tool, unlock and/or clear the password for any account on the local machine.
Easy to do and never fails 
cappilio
(cappilio)
6
Also if its just a question of accessing files. cant you just boot a live ubuntu CD and pull the files off that way?
ntholomew
(Ntholomew)
7
Do you have the OS install disk?
Hiren’s sounds great, but no way of getting the software onto the laptop. The user has no OS disk and no way writable CD’s to create an ISO disk… she does have another PC with internet, but no way of transferring those files! Eeek
cappilio
(cappilio)
9
No way of taking her HDD and popping it into another machine?
ntholomew
(Ntholomew)
10
Sh*t creek and no paddle.
With nothing but a guest account at your disposal you’re in a bad place.
Not even recovery disks? If you can get to system recovery I can help.
Otherwise I’m fresh outta ideas
Why can’t you create a boot USB? You don’t need a CD if you use the link I provided above. It also shows you how to create it.
2 Spice ups
ntholomew
(Ntholomew)
12
Sounds like no USB Drive to me
I am not with the user, if i was there I could do the above… I know how to do with a recovery disc, but unfortunately she does not have one. Also she has no internet to follow the link, doh!
cappilio
(cappilio)
15
With NO USB / No CD / no other bootable media but only a guest account your screwed.
1 Spice up
Ah well, thanks very much for your help guys! 
shibboleet
(Shibbol33t)
17
I see you’re using the sticky keys exploit, but why go to the guest account when you can log into the built in administrator account?
http://4sysops.com/archives/forgot-the-administrator-password-the-sticky-keys-trick/
ntholomew
(Ntholomew)
18
This clearly states you need a USB stick or the recovery disc…
shibboleet
(Shibbol33t)
19
The guide says Windows PE or RE and suggests using a USB. A recovery partition will do the same trick.
I have ever change my forgotten Windows 7 password just as this way: How to Change Windows 7 Password ?