Currently we use Offline NT Password & Registry Editor for machines we do not have admin passwords for. It is a really nice tool but has some flaws. Is there something better/more modern?

locked by HopelessN00b Dec 5 '14 at 6:44

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. See the help center for guidance on writing a good question.

Read more about locked posts here.

  • What flaws have you found? I've used it for years and not had a problem. I ask this genuinely out of interest. – Gareth May 4 '09 at 22:43
  • Under the FAQ they cite EFS and AD PDC as being unrecoverable. While I love this tool for workstations, these other two can create a problem if you are taking over. – Terry May 5 '09 at 3:45
  • Well the above comments are by design, if you have ever played with the other features such as setting passwords, enabling accounts, etc., it works probably 60% of the time. Obviously the best thing to do is just blank admin pass and restart. That would be a cool automated tool. – Terry May 5 '09 at 14:06

I've had success with OphCrack



Before it was pulled, l0phtcrack was the way to go. L0pht went commercial and the tool was pulled. ophcrack is a "branch" of this and will provide you with what you need (see Kenvin Dente's answer for linky).

This may or may not apply to your situation, but to avoid this issue, the Local Administrator account is set to a different password, and is never given to anyone for any reason. So, even if the machine is disconnected from the network, and you've used up your 15 cached attempts (the default), you can still get in and affect changes as needed. Users that need special privs (when it's absolutely required because the program's concept of security is botched) we grant them "Power User", etc.


Kryptos Logic Kon Boot works well. No need to overwrite passwords, but it can do it as well.

Not the answer you're looking for? Browse other questions tagged or ask your own question.