Crack win2000

[flowjob]

hey, a friend pf mine needs help:
He lost the password of a old windows 2000.
I know how to crack vista and 7,by replacing utilman with cmd, and starting utilsman at the login screen.

But older versions don't have the utilsman button, so wich process is unnessecary for booting 2000, so I can replace it with cmd?

Or is there a even better way?

[p_2001]

Dunno about the 2000, but win 98 had a password file... I used to delete the file and bam.. no need for passwords ... maybe it is similar.. boot from dos, delete the password file


there are utilities on the net to reset the system but the accounts are lost.. perhaps you could make a backup and then reset.


ok, so the 2000 has SAM files.. found it on one of my downloaded tutorials.. so I cannot guarantee  if it works

c:\winnt\system32\config

delete the SAM file and reboot.. a new one is generated with blank password.. but some data loss is possible, it was written in the warning

[flowjob]

LOL   

I'll use it as a plan B as it could happen that the OS gets damaged...

Any other ideas?
Or does someone know an unneccecary process that gets executed when the OS boots?

[techb]

This may shed some light.


You basically need to grab the SAM file and extract the password from it. BackTrack has plenty of tools to do so, so you wont need the live CD they recommend in the link I posted.


There is also a way to just reset the password, and I think BackTrack has tools for that as well.

[centizen]

 Windows 2000 is based on the NT kernel so you can use CHNTPW to either extract or simply delete the Windows SAM file, like Techb said.  chntpw is a free tool you can get either as a standalone boot disk, or you can use backtrack which includes a copy of the latest version


I've used it before on various computers and had no ill effects. The only issue which can arise is when you use it on a computer which has full filesystem encryption enabled, which unless I am much mistaken does not even exist in Windows 2000. Otherwise, it's harmless.

[Kulverstukas]

Did you try to snatch SAM and SYSTEM files and then use SamInside to extract the password? It surely works on XP, dunno about win2k

[Ghastly]

If you don't want to crack it simply bypass it by using Konboot.

[Kulverstukas]

Konboot removes the password... not very good if you don't want others to know.

[p_2001]

Konboot removes the password... not very good if you don't want others to know.

for his purpose it is sufficient is it not?

[Kulverstukas]

yeah I guess it's good for this particular situation...

[Daemon]

My personal favorite is OPHcrack.
Download it and put it on a live CD if possible, or an .iso on a USB. then just plug it in, boot the computer. and wait while the password is grabbed

http://ophcrack.sourceforge.net/download.php

Another tool is l0phtcrack, but i havent used it personally. So idk if it'll work/how good it is/etc.

Cheers

*edit: instructions for making a USB
http://www.pendrivelinux.com/creating-a-bootable-usb-ophcrack/