Locked myself out of windows xp

englishpremier · 24 Jun 2011 at 18:54

Removed myself from our work domain (don't know why really) but stupidly thought that i had a local account on the laptop, which it seems i dont.

Now of course i cant log in.

I've tried resetting the administrator password using a linux live cd and chntpw, which all went well in linux, but when i loaded windows back up, i still couldn't log in (as Administrator with a blank password).

Any idea? Or am i going to have to grovel on Monday morning?

Schizo · 24 Jun 2011 at 18:56

grovel and make sure you do it convincingly

theheyes · 24 Jun 2011 at 19:00

Yeah, you tried to escape their domain but they all come crawling back in the end.

Hairybudda · 24 Jun 2011 at 20:03

Yup you're screwed, unless you have another machine and copy of server to mimic your old domain setup.

Deleted member 77746 · 24 Jun 2011 at 20:42

englishpremier said:
I've tried resetting the administrator password using a linux live cd and chntpw, which all went well in linux, but when i loaded windows back up, i still couldn't log in (as Administrator with a blank password).

Set the Administrator password to a actual password not blank. Something like 'xxx' or 'password'. Blank passwords won't work.

SoundsGood · 24 Jun 2011 at 23:37

Is it likely to be a short / simple password? If so you could brute force it

englishpremier · 25 Jun 2011 at 00:15

iDroid84 said:
Set the Administrator password to a actual password not blank. Something like 'xxx' or 'password'. Blank passwords won't work.

Nah doesn't work. When i boot up, my old domain username is still in the login box.

Hairybudda said:
Yup you're screwed, unless you have another machine and copy of server to mimic your old domain setup.

I do actually have access to another machine

Jay · 25 Jun 2011 at 00:21

http://ophcrack.sourceforge.net/

muon · 25 Jun 2011 at 00:40

Jay said:
http://ophcrack.sourceforge.net/

Doesn't that need a local account?

Deleted member 77746 · 25 Jun 2011 at 09:43

I'm confused here you said in the first post. You said you removed yourself from the domain meaning there must be a local account.

What do you see on the login prompt box?

Xez · 25 Jun 2011 at 09:49

I would get access to another PC and check the usernames, chances are the local admin account is either disabled or has been renamed...

Deleted member 77746 · 25 Jun 2011 at 09:57

Xez said:
I would get access to another PC and check the usernames, chances are the local admin account is either disabled or has been renamed...

Yes but a password reset disks tell you what the accounts are called and if they are enabled or disabled

englishpremier · 25 Jun 2011 at 10:25

iDroid84 said:
I'm confused here you said in the first post. You said you removed yourself from the domain meaning there must be a local account.

What do you see on the login prompt box?

In the login box i see my old username.

I've checked using chntpw, the local accounts are:
Administrator
Guest - which is disabled
And another that is the name of the external IT company we use.

I've tried resetting the passwords to something else i.e sudo chntpw -u Administrator SAM

but still can't get in.

Deleted member 77746 · 25 Jun 2011 at 10:34

Ok then in that case it will have to go to the IT department.

englishpremier · 25 Jun 2011 at 11:10

Kaboom i'm in. The ophcrack worked on one of the named admin accounts. Now for the setup.

How do i find and change the default Administrator account?

skanky · 25 Jun 2011 at 11:11

englishpremier said:
Or am i going to have to grovel on Monday morning?

grovel, then take any ear bashing from your IT dept about removing their machines from their domain and hope they don't take your local admin rights away..

(cause thats what i'd do to people who do this who come to me at work. its a work machine, why take it off the domain!)

englishpremier said:
Kaboom i'm in. The ophcrack worked on one of the accounts. Now for the setup.

surely you're not going to be able to add it back to the domain unless your domain login has permissions to do this sort of thing in the first place?

englishpremier · 25 Jun 2011 at 11:14

It's our machine we pay them for certain stuff like email, and a shared server (which is more hassle then its worth. We plan on setting up our own network.

I don't need it on the domain. Our newer laptops aren't set to a domain, we just log in ad hoc for things like shared drives.