1

I have 6 windows machines that have several local admin users on them I and the user pw we have is local user not admin we need to make some changes to the system

I have googled this and comes up with alot of choices I have never used anything like this so want the recommendations that you all have used :slight_smile:

We took this account over from another person who moved on with out documentation

What PW Reset tool do you all use or recommend easy to download Paid or Free to use to get this done?

Thanks in Advance

6 Spice ups
2

Hirens boot CD.

Free and will let you reset an existing or create an admin account.

11 Spice ups
3

They now have Hiren’s boot USB

6 Spice ups
4

do you have an admin account with access to those machines?

If you do you can easily reset them using the command line or powershell.

If you don’t are the machines bitlocker (or other) encrypted as that will prevent the use of tools like the Hiren’s boot CD mentioned above

2 Spice ups
5

No admin account on these machines

No bitlocker or other encrypted software

I saw hirens
what about this one I read good things about it?

@Rod-IT @Nerf_Herder

2 Spice ups
6

Looks like Hirens has the Lazesoft so going to check it out

Thanks all

2 Spice ups
7

I don’t know Lazesoft. and I haven’t used Hiren’s in years. but I do recall that the “Erase” PW option or “set to blank” I don’t recall the wording used to work in that Toolset. the reset password never seemed to work.

2 Spice ups
8

Since you gained these from and outside system, can you just transfer the data to a new system, then wipe and reuse.

Maybe it just me in my old age, but i would not trust outside systems. never know what you could introduce to your enviroment. Also you could be chasing issues for a long time because they may not be your standard build.

3 Spice ups
9

There must be at least 1, you’ve already said there are several local admin accounts, reset one of those or add your own using the Hirens mentioned before.

I wouldn’t look at paid options since the free ones work so well.

2 Spice ups
10

Yes that is my plan to reset one of the admin accounts and work from there

1 Spice up
11

I’ve successfully used 4winkey. it was fairly cheap, if I remember correctly.

12

I’ve had good experiences with Offline NT Password & Registry Editor for resetting Windows passwords. It’s free and pretty straightforward. You’ll need to boot from a USB drive to use it, but it works well for getting access to local accounts.

13

I have success on all Windows versions (without FDE/Bitlocker active), using an bootable Windows ISO and then do a couple actions.

Saw this now: My guide to getting Admin on (almost) any Windows 10 machine. : r/Hacking_Tutorials

14

You can also use Utilman.exe.

Boot from any Windows installation CD or Flash Drive.
Go to Repair function.
Use the command Prompt.
cd \windows\system32
Type copy utilman.exe utilman.bak
Type copy command.exe utilman.exe
Reboot computer and at the Login Screen open “Accessiblity” at right bottom corner.
This will open the command prompt.
Type net user username newpassword substitute username with actual name and password you want to use.
Now login with the username and password you setup.
After login copy utilman.bak to utilman.exe in the c:\windows\system32 directory.
Easy when there is no drive encryption.