Several solutions after the Win2000 administrator password is forgotten

1st TRICK: The Input Method Vulnerability (the current machine has basically no such vulnerability, so the feasibility is not high)
1. Use the file type to edit and create an administrator user
Boot to login interface
1. Call up the input method, for example, full join-> help-> operation guide, and exit the Help file of the input method guide.
2. Right-click "options" and select "Jump to URL"
3. Add "C: \" to the URL. Other values are also supported.
4. the right side of the help will go to c :\
5. Press the "option" button on the help.
6. Select "Internet" to start the file type editing box.
7. Create a new file type. For example, add "you" to the excluded file suffix. OK.
8. Select the "you" file type in the file type box and click the "advanced" button below.
Current file operation dialog box.
9. Create a file operation with an arbitrary write name, such as "PPP"
10. The command for executing this operation is as follows:
C: \ winnt \ system32 \ cmd.exe/C net user aboutnt 123456/Add
C: \ winnt \ system32 \ cmd.exe/C net localgroup administrators aboutnt/Add
Exit after completion
11. Change a c: \ file such as "ppp.txt" to "ppp.txt. You", and double-click to open it.
This file.
12. Normally, this file cannot be opened, and the system will not be prompted after a while, but then I
The user aboutnt has been added, and the permission is administrator.
13. Return and log on again with the aboutnt user.
2. Create administrator users using shortcuts
Steps 1-4 are the same as those in step 1.
5. Right-click any file or folder under c: \, for example, right-click the WINNT folder to create its shortcut
Method: "shortcut winnt ".
6. Right-click the "shortcut winnt" file and choose "properties"> "shortcut" to repair the target.
Change to "C: \ winnt \ system32 \ net.exe user aboutnt 123456/Add ",
Change the start position to "C: \ winnt \ System32". Confirm to exit. "shortcut winnt"
The icon is changed from a folder to a DOS window.
7. Right-click "shortcut winnt", run it, and create a "aboutnt" User
8. Repeat Step 6 and change the target to "C: \ winnt \ system32 \ net.exe localgroup ".
Administrators
Aboutnt/Add ", starting from" C: \ winnt \ System32 ". Confirm to exit.
9. Right-click "shortcut winnt", run it, and add the "aboutnt" user to local management.
Member group.
10. Delete the "shortcut winnt" file, return, and log on as an aboutnt user.

2nd tips: Screen ProtectionProgram
The screen saver sometimes plays a very important role. using it to restore the forgotten administrator password is an example.
We all know that the Screen Saver is used, usually (note, not absolute), if
If you do not log on 15 minutes after the system starts, Win2000 will start the screen saver.
Logon. scr is located under c: \ winnt \ system32. A Win2000 flag will run on full screen.
This time, I did something about this logon. scr, because logon. scr is an executable file,
So I first renamed logon. scr to logon. zqs, and then
Copy assumer.exe to c: \ winnt \ system32 and change it to logon. scr.
We need to remove the hard disk to another machine. Of course there are other methods.
Restart the machine. After the logon dialog box appears, do not log on. Wait for 15 minutes.
When the Protection Program is started, a resource manager appears and the target is located under c: \.
Easy to operate
The input hole method is used (see the first trick.

3rd moves
Use LC to crack SAM (this method depends on the strength of your password), or
Delete the Sam file and Its log file under winnt \ system32 \ config (to DoS or to mount the hard disk)
To other systems, this method will destroy the original user information, but has little impact on personal computers)

4th strokes (this method does not seem to have a high success rate, according to my practice)
X: \ Documents and Settings \ administrator "(X is Windows
In the disk drive letter), delete the "cookies" folder under this folder, and then re-
You can log on to windows with a new password.

5th use the boot script (provided that you can access the system with another account)
Create a batch file named admin. bat with the following content: Net user administrator 12345678
In this way, the password of the Administrator account is changed to 12345678, and then
1. Click "start" menu> "run" and enter "MMC" in the displayed dialog box to open Microsoft management control.
(Microsoft Management Console, MMC ).
2. Click "console" menu-> "Add/delete snap-in...". In the displayed "Add/delete snap-in" dialog box
Click "add" in the dialog box.
3. In the "add independent management unit" dialog box that appears, select "Group Policy" in the "available independent management units" list.
Click "add.
4. When the system asks which group of policy objects to use
Select the default "Local Computer" Group Policy object for the startup/shutdown script executed by the local computer ;.
5. Close the dialog box and return to the Management Console. Now there is
Corresponding Group Policy Object Tree.
6. In the console tree pane on the left of the console, expand the Group Policy object in sequence-> "Computer Configuration
"->" Windows Settings "->" script (start/Close) "node, double-click" Start
Dynamic"
7. Double-click the "Start" project in the details pane on the right. In the displayed "launch properties" dialog box, click
Click "add" to add a new computer STARTUP script.
8. A script entry includes the Script Name and parameters.
You can fill in the absolute path of the previously created admin. BAT file. The parameter of the. Script is
Optional. It can be left blank. It depends on the actual situation. We don't need to care about it here. t ".
9. In this way, you can exit. When you exit, a window is displayed, and you can choose Save.
10. restart the computer and log on with The Adminstrator account. The password is 12345678.
Note: This method can be used in many aspects, such as script (not familiar with the script) or batch
Let's take a look at your flexible application.

6th moves
O & O bluecon 2000 is a tool and software developed by Germans. It can help you conveniently
Repair the damaged Windows NT/2000 system, which is different from the Windows 2000 Recovery Console
Not many. The only difference is that it can enter the system without a password. This tool is the most
The common function may be to change the password of the local administrator.
To use o & O bluecon 2000 to change the password of a local administrator, follow these steps:
1. Create a tool disk.
(1) create four windows 2000 boot disks. For details about how to create them, see winnt/on this site.
Make small and complete important floppy disks.
(2) Start O & O bluecon 2000 software's "O & O bootwizard" and modify
The installation of a floppy disk (only 1st and 4th are modified) is divided into four steps.
(3) The first step is to select the boot device and ask which method you use to guide the system.
Floppy (four mounted floppy disks) or CD-ROM, here we choose floppy (4 Disk
Required;
(4) Step 2 Select Options ask if we have created Windows2000 installation and startup
Disk, because we just created the disk, so do not select, click Next;
(5) Step 3 patch Disk 1 and patch disk 4 will prompt you to insert 1st and
Modify the 4th images. Follow the on-screen prompts to complete the preparation of the tool disk.
2. Modify the local administrator password
This tool is the same as the one used to change the administrator password.
The password of the local administrator in Sam.
Before using O & O to change the password of the local administrator, we will first introduce the commands supported by O & O, a total of 28
You can use it at the "A: \>" prompt "? "Or" help "command to view. These 28 commands
Important:
Backup: Backup Registry
Device: displays the hardware configurations of an operating system.
Edlin: a text editing tool
Passwd: Password Change command
Reboot: restart the machine command
Regedit: edit the Registry command
Service: displays/starts/disables service commands
Scopy or SCP: file copy command, which can copy the security attributes of a file
User: displays users of an operating system.
Vmap: displays information about the current volume.
You can use the "command /? .
To modify a local user, follow these steps:
(1) Insert 1st floppy disks into the drive, restart the machine, boot the system with a floppy disk, and press the screen
The following message is displayed:
O & O bluecon 2000 V2.0 build 256-English keyboard
(C) 2000 O & O software GmbH. Allright reserved.
A: \>
(2) Use the passwd command to modify the password of the SAM Database account.
The usage is as follows:
Passwd []
The password parameter in the passwd command is optional. If you do not enter the password of this account
The password of this account will be cleared (this is not recommended ).
If you want to change the Administrator's password to 123456
Usage:
A: \> passwd administrator 123456
After you press enter, if you have multiple operating systems in the current system, the system will prompt you which one to modify
The administrator password for each operating system. A similar prompt is as follows:
Please choose a system to logon
1. "Microsoft Windows 2000 Server"/fastdetect
2. "Microsoft Windows XP Professional"/fastdetect
3. "Microsoft Windows 2000 recovery cortrol"/cmdcons
Select an appropriate operating system to be modified. Here we select 1, that is, to modify the administrator password of Windows2000 Server. If

The system prompts "password ".
Was successfully changed indicates that the password in the management is successfully modified. If your
O & O software is not a full version but is not a registered version, the system will prompt the administrator password is only
Read, cannot be modified.
(3) Remove the floppy disk from the soft drive, restart the system, and enter the directory recovery mode.
The new administrator password is used to access the system.
The latest version of this software is http://www.oosoft.com;

7th exploitation of ERD Commander 2002 Software
The software is easy to use. The Boot disc you use can access the NTFS partition, And you can skip the management.
The password of the member account is modified, and it is similar to the XP interface, which is not much different from operating XP.
You can start-> Find locksmith in the program menu to change the password (directly enter the new
Password)
However, I cannot find a separate version, but it has already been set in "Phoenix Software's super omnipotent boot CD ISO"
The super omnipotent startup CD of Phoenix software can be burned to the CD, and started with the CD
You can. (This ISO can be searched and downloaded online)

A simple method is to delete the Sam file in the WINNT/system32/config directory of the 2000 partition under XP, delete it, and restart

log in with an empty password of administrator. This method will not be lost, which is fast and convenient. We recommend that you use this method.