Windows R2 AD domain controller password hack

because of a long time no login domain controller, incredibly the administrator password to forget, the result is embarrassing, and later I looked at the online mentioned can use Osk.exe to crack, test the next sure can. The following is the process of cracking.
since my domain controller is installed under VMware ESXi, mount the Windows Server R2 CD, choose boot into the BIOS, found that reboot several times press F2 can not enter the BIOS, but the data learned in vsphere Client or vcenter, in the advanced settings of the virtual machine, tick the next boot to force enter BIOS option. Finally be able to enter the BIOS, change the boot entry to CDROM boot.
650) this.width=650; "Src=" http://file///c:/users/zhouchao/appdata/local/ynote/data/sinycn@126.com/ 1120e1ce719f44a8895dbfaf3a77013e/2014-10-16_092230.png/"border=" 0 "style=" margin:0px;padding:0px;border:medium none;line-height:1.6em; "/>
650) this.width=650; "src=" http://bbs.51cto.com/images/default/attachimg.gif "border=" 0 "style=" margin:0px; Padding:0px;border:medium none;line-height:1.6em; "alt=" Attachimg.gif "/>650" this.width=650; "src=" http:// S3.51cto.com/wyfs02/m00/4c/85/wkiol1q_jb-jwjnoaahh7s9ckz4561.jpg "border=" 0 "style=" margin:0px;padding:0px; Border:medium none;line-height:1.6em; "/>

Enter the installation interface
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/4C/85/wKioL1Q_Jb-SQT03AAN43sKQCdg687_small.jpg "border= "0" style= "margin:0px;padding:0px;border:medium none;line-height:1.6em;" alt= "wkiol1q_jb-sqt03aan43skqcdg687_ Small.jpg "/>

Press the SHIFT+F10
650) this.width=650; "Src=" http://s3.51cto.com/wyfs02/M01/4C/84/wKiom1Q_JYijuzrbAAHuxh4_PkU019_small.jpg "border=" 0 "style=" margin:0px;padding:0px;border:medium none;line-height:1.6em; "alt=" wKiom1Q_JYijuzrbAAHuxh4_ Pku019_small.jpg "/>

Enter the system directory:
650) this.width=650; "Src=" http://s3.51cto.com/wyfs02/M02/4C/85/wKioL1Q_JcDQVrBVAAGWBADIOdY133.jpg " Border= "0" style= "margin:0px;padding:0px;border:medium none;line-height:1.6em;"/>

perform the following actions:
650) this.width=650; "src=" http://s3.51cto.com/wyfs02/M02/4C/84/wKiom1Q_JYnAlYL5AAGsSWhQu4s450.jpg "border=" 0 " Style= "Margin:0px;padding:0px;border:medium none;line-height:22.4px;font-family: ' Song Body ', Arial, Helvetica, ' San-serif '; Font-size:14px;white-space:normal;background-color:rgb (255,255,255); "/> 


Exit Setup reboot (you can restart the server directly):

then press the red icon of the power button to pop up the following dialog box
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/4C/85/wKioL1Q_JcCQIyKDAAN2flhmJLY119_small.jpg "border= "0" style= "margin:0px;padding:0px;border:medium none;line-height:1.6em;" alt= "wkiol1q_jccqiykdaan2flhmjly119_ Small.jpg "/>

You can change the administrator password by entering the following command:
650) this.width=650; "Src=" http://s3.51cto.com/wyfs02/M00/4C/84/wKiom1Q_JYqgzZaxAACtejciqes865.jpg " Border= "0" style= "margin:0px;padding:0px;border:medium none;line-height:1.6em;"/>


OK, password hack successful

Windows R2 AD domain controller password hack