Chntpw

Orbid only offers support for windows systems. So playing around in Linux at home I discovered this Chntpw where you can edit the sam file to erase the password of an account (e.g. the admin account) and active it.

This can be useful and has saved me a lot of time already, some devices were locked out of the domain. "The trust relationship between this workstation and the primary domain failed" error.

It's easy to fix, just enter the local admin credentials and rejoin the domain, oh wait... The password is wrong or not available!

Instead of a clean install with the needed software, I could erase the password, log in, rejoin and set the password again. fixed and ready to run again.

My way to do this is with a live Ubuntu usb. Boot from usb and try Ubuntu. Next I open the terminal because it looks cool.

I add the universe repo with following command:

> sudo add-apt-repository universe

Next I install chntpw

> sudo apt install chntpw

After the installation, find the sam file in the config folder and change your directory:

> cd /media/Ubuntu/os/windows/system32/config/

To clear the password execute chntpw in config folder

> sudo chntpw sam

type 1 to clear pw

type 2 to activate the account

type 3 to promote to admin

Remember to activate the account, or you can restart...

press Q + y to quit and save

reboot windows without live usb and login with admin/without password. Please set a strong password after and keep it somewhere safe!

----------

I might explore some scripting to automate this in the future or find a live usb with chntpw already active

Add comment

Comments

There are no comments yet.