Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Currently we use Offline NT Password & Registry Editor for machines we do not have admin passwords for. It is a really nice tool but has some flaws. Is there something better/more modern?

share|improve this question
    
What flaws have you found? I've used it for years and not had a problem. I ask this genuinely out of interest. –  gyaresu May 4 '09 at 22:43
    
Under the FAQ they cite EFS and AD PDC as being unrecoverable. While I love this tool for workstations, these other two can create a problem if you are taking over. –  Terry May 5 '09 at 3:45
    
Well the above comments are by design, if you have ever played with the other features such as setting passwords, enabling accounts, etc., it works probably 60% of the time. Obviously the best thing to do is just blank admin pass and restart. That would be a cool automated tool. –  Terry May 5 '09 at 14:06

3 Answers 3

up vote 4 down vote accepted

I've had success with OphCrack

http://ophcrack.sourceforge.net/

share|improve this answer

Before it was pulled, l0phtcrack was the way to go. L0pht went commercial and the tool was pulled. ophcrack is a "branch" of this and will provide you with what you need (see Kenvin Dente's answer for linky).

This may or may not apply to your situation, but to avoid this issue, the Local Administrator account is set to a different password, and is never given to anyone for any reason. So, even if the machine is disconnected from the network, and you've used up your 15 cached attempts (the default), you can still get in and affect changes as needed. Users that need special privs (when it's absolutely required because the program's concept of security is botched) we grant them "Power User", etc.

share|improve this answer

Kryptos Logic Kon Boot works well. No need to overwrite passwords, but it can do it as well.

share|improve this answer

protected by splattne Aug 18 '10 at 8:05

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.