Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

How to get administrator access to Windows without a password

Get around password protection in Windows XP, Vista and 7

Article comments

There are a number of ways to gain access to a password-protected administrator account. I'll offer two. The first one is quick and easy, but only works in XP. If the used PC runs Vista or Windows 7, skip the next three paragraphs.

XP contains a backdoor entrance to administrator control. The following will only work if the previous owner didn't know enough to close the backdoor.

First, boot into Safe Mode: Start your PC and press F8 before the Windows logo appears. (It may take a few tries to get the timing right.) From the resulting Boot menu, select Safe Mode. When the logon screen appears, it will probably contain a user you've never seen before, Administrator, that does not have a password. Thus, you can enter Windows as an administrator-level user.

Once inside Windows, you can use Control Panel's User Accounts applet to change the password on the other administrator account or create a new one for yourself. And while you're there, you might also want to add a password to the Administrator account in order to close the backdoor. But that's probably the case.

If you're using Vista or Windows 7, or if someone closed that backdoor already, you can remove the administrator password with Ubuntu Linux. This gets a little complicated, so follow it closely.

If you don't already have a live Ubuntu Linux CD, download the current version. Double click the just-downloaded .iso file. Windows might start a program that burns your Ubuntu CD. If it doesn't, download and install IMGburn, then try again. Simply copying the .iso file to a CD won't work.

The instructions below are based on Ubuntu version 10.04.1 LTS, the most current version as I write this. Once you've created the disc, boot off the CD. When asked, click the Try Ubuntu button.

You'll first need to install the software: From the menus in the top right corner of the screen, select System, Administration, Software Sources. In the resulting window, check the two options not yet checked: Community-maintained Open Source software (universe) and Softrware restricted by copyright or legal issues (multiverse). Click Close, then Reload.

After the program is done processing, select System, Administration, and Synaptic Package Manager from the top right corner menus.

In the resulting window's Search field, enter chntpw. A program with that name should appear in the list of packages below. Click it and select Mark for installation. Click the Apply toolbar icon. Click Apply and wait until the installation is complete.

Now mount your drive: From the top menus, select Places, then your internal hard drive or Windows partition. When it's mounted, a File Browser window (much like Windows Explorer) will appear. By double clicking the folder icons, go to the Windows drive's Windows\system32\config folder. Leave this window up.

Now you can remove the password.

From the top menus, select Applications, Accessories, Terminal. This brings up a black window similar to Windows' command line (or the DOS box for you old-timers). Arrange these two windows so that you can see the top section of the File Browser window behind the Terminal window.

In the Terminal command line window, type cd /media/ (note the SPACE after cd) and the path to your config folder, using the folder names at the top as a guide. I wish I could simply tell you to type "cd /media/windows/system32/config", but unlike the Windows command line, Ubuntu's Terminal is case sensitive. Depending on what version of Windows you're trying to reclaim, it may be windows/system32 or Windows/System32, and Ubuntu won't see it if you get the case wrong.

When it's typed, press ENTER.

Now type sudo chntpw -u logon SAM, where logon is the logon name for the administrator account. For instance, if you're trying to take over my account, you'd enter sudo chntpw -u Lincoln SAM. Remember, everything here is case sensitive, including the logon name.

After you hit ENTER, a lot of text will scroll up very quickly. If you entered the text correctly, the last section will begin ". . . . User Edit Menu:"

Now press 1 (the number, not lower-case L), then ENTER. At the resulting question, press y.

When the program is done, click the power button logo in the upper right corner and reboot into Windows. The account in question will no longer require a password.


Share:

More from Techworld

More relevant IT news

Comments

Gary said: what if its not your pc and there are passwords on all accounts and its F8 not F5Slax ware have a boot cd iso you can burn and it will show you the passwords of all accounts from boot remember you have to set your cd-dvd to boot before your hard drive boots


IT Jobs

Did you know? Techworld offers an IT Jobs section with hundreds of jobs! Current job listings are now available for Software Developers, Web Developers, Application Engineers, Project Managers, Graduate opportunities and more. Apply for your new IT job today!


Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *