NT Server, No Password

[WhazAMatta]

I inherited an NT4 server and do not know any of the passwords or usernames. Is it possible to retreive the contents of the harddrives in any way, or change the administrator password without knowing the old one? If so, what is the point of NT security.

 

[RJ45100BT]

You need to obtain an NTFS-DOS boot disk from

http://www.sysinternals.com,

and L0pht Crack from

http://www.l0pht.com

or

http://www.@stake.com.

Unless the server was installed FAT, which i doubt. In which case a regular old boot disk will work.

-Anyway, boot with the floppy, run NTFSDOS and map a letter to the ntfs partition.

-a:\ntfsdos > x:

-by typing a:\and copy the SAM from
x:\winnt\system32\config
Then take that floppy, with the copy of the SAM to the pc/laptop that you installed l0phtcrack on and point l0phtcrack to that SAM and voila!

Cracked NT passwords/


--BD

 

[browolf]

this looks useful:
Offline NT Password & Registry Editor

http://home.eunet.no/~pnordahl/ntpasswd/

No security is perfect and having physical access makes a lot of things possible. However most people who would "hack" a server shouldnt have physical access.

 

[CowboysFan87]

Easiest thing to do is a parallel installation...a lot faster too. Simply re-install Windows NT on the box into a different folder. See this Microsoft article:

http://support.microsoft.com/default.aspx?scid=kb;en-us;259003

 

[attila64ro]

You could also try to take out the harddisk, and put it as slave or secondary master in another NT machine. Then drive contents can be made accessible. In the worst case you have to take ownership of files and folders of the HDD as administrator on the machine you put the drive in. There is always an explanation!
But maybe we don't know it.
The truth is out there!