Trying to recover data from locked Win2k machine

~J~

~J~

Soldato
Joined
20 Oct 2003
Posts
7,558
Location
London
Help!

Company I'm on contract with is undergoing some big changes and they have a PC that hasn't been used for nearly a year but contains some critical data.

The problem is this:

The machine administrator password has been lost.
I can't log onto the network and \\machinename\c$ because the computer name is the same as another PC on the network!

The only 2 options I can think of are:

Rename the current PC to something else, and allow the 'locked' machine access to the network (but will cause some issues as people's work are on mapped drives to the computer in question).

Or remove the harddrive and jump on it as an additional drive. I've no problem doing this, just a lot of time and hassle and having to wait until a machine is free for me to do this.

Is there any way I can bypass the system, bearing in mind I have NO Windows2000 CD here that works (the one in the office has a beautiful scratch across it!!)
 
ophcrack

download the live cd for that, boot from it in the machine, it'll give you the admin password for it
 
If you want yet another option, if you boot it with a linux linux live disk and mount the NTFS drive (most distros do this automaticaly) it ignores NTFS permissions.
 
Back
Top Bottom