Need to unlock a windows account with an unknown password and do not have a password reset tool? Look no further.

Step 1: Requirements and Intro

You will need the following:

  • Linux Live CD (Any Flavor)
  • Un-Encrypted Computer

How does it work?
This trick works by replacing the accessibility tools with a high level command prompt and using this to change the password of the account.

Step 2: Boot Linux

Use your CD or USB to boot your Linux installation on the computer with the unknown password.

Step 3: Replace Magnify

Browse with a terminal or a GUI file manager to
“C:\Windows\System32”

Rename “Magnify.exe” to “Magnify.bak”

Copy “cmd.exe” (this is in the same directory)

Rename the copied “cmd.exe” to “Magnify.exe”

Step 4: Boot Windows

Reboot the computer back into Windows mode.

At the login screen you can click on the accessibility controls or press Win+U

Check the box for magnify and then click apply and you should get a command prompt to pop-up.

In the command prompt type the following.
“net user user_name new_password”

Step 5: Test Login

Trying logging in as the user with the password you just set above and you should be ready to rock.

Step 6: Clean-Up

You will most likely want to revert the file changes deleting your copy of command that you renamed to magnify and renaming Magnify.bak back to its original Magnify.exe. If you do not then you are leaving a security hole in that system.

5 Spice ups

That’s nice but you could just replace the utilman.exe and then you get a command prompt straight from your win+U shortcut (ie fewer steps)

That is a really great point. Definitely nice to shave off a few steps!

If you already have a Linux Live CD then why don’t you have a password reset tool? Also, if my drive is encrypted, is there any way to change the password?

I have a USB with DSL on it. There is not a build in password reset tool on that distro. For my job I often end up on site with no internet access but need to get into a computer. Plus it is always good to know another way to break in if you needed to.

or you can use konboot cd and boot up from it . All you have to do is press enter for the password to get into that profile.

This will come in quite handy to know… I’ve come across many instances where people have asked me to reset their password on home systems. At work it’s so much easier to do with AD :slight_smile: If only I could set up my private/residential clients with AD… lol

Want to do Windows password reset? A Windows Password Recovery Tool can help you.