{"id":13,"date":"2020-04-17T06:52:05","date_gmt":"2020-04-17T06:52:05","guid":{"rendered":"https:\/\/www.cstroik.com\/?p=13"},"modified":"2020-11-28T02:24:31","modified_gmt":"2020-11-28T02:24:31","slug":"windows-vista-password-recovery","status":"publish","type":"post","link":"https:\/\/www.cstroik.com\/index.php\/2020\/04\/17\/windows-vista-password-recovery\/","title":{"rendered":"Windows Vista Password Recovery"},"content":{"rendered":"\n

Step 1: Recovery Command Prompt from Windows Vista Install Disk<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n

Start the computer with the Vista install disk. At the Language\/Time\/Keyboard window press Next<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

At this window, choose Repair your computer<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

The Windows installer will take a few seconds to find the current Windows install. Once it does, select it<\/strong> and press Next<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

At this window, choose the last option; Command Prompt<\/strong><\/p>\n\n\n\n

This will run cmd.exe from the install disk. at this point permissions will be ignored on the Windows install, allowing you to replace and move files in protected Windows directories like files in C:\\Windows\\System32<\/p>\n\n\n\n

Step 2: Replace Windows Accessibility Manager with a Command Prompt<\/h2>\n\n\n\n

A command prompt from inside Windows will run with whatever the current user’s permissions are. When trying to change the user or replace files in protected directories it requires administrator privileges. The exception in Windows Vista is that it will run the Windows Accessibility Manager before any user has logged on, running it as the “System” user which can write\/copy\/replace files in any directory. Windows does not check whether the Windows Accessibility Manager actually is that utility, so the executable (utilman.exe) can be replaced by any other executable, which can then be run as the system user without a username and password at boot, letting it enter commands that need administrator privileges to run.

utilman.exe is inside a protected system folder (C:\\Windows\\System32) which is why this has to be done from an install disk that will ignore file protections.

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

From the command prompt, enter the following commands.<\/p>\n\n\n\n

c:<\/strong><\/p>\n\n\n\n

This will change the current drive from X: (the install disk) to C: (the drive Windows is already installed on).<\/p>\n\n\n\n

cd windows\\system32<\/strong><\/p>\n\n\n\n

This will change the directory to the directory with the command prompt and the Accessibility Manager executable.<\/p>\n\n\n\n

ren utilman.exe utilman.exe.bak <\/strong>

This will rename the Accessibility Manager to something else for backup.<\/p>\n\n\n\n

copy cmd.exe utilman.exe<\/strong><\/p>\n\n\n\n

This will replace the Accessibility Manager executable with the command prompt executable. When Windows tries to run the Accessibility Manager it will run a command prompt instead.

Remove the install disk<\/strong> and reboot<\/strong> the computer.<\/p>\n\n\n\n

Step 3: Run the Command Prompt as System and Reset the Password<\/h2>\n\n\n\n

When the computer reboots press Windows Key + U<\/strong>

This is the key combination to start the Accessibility Manager before the user logs in. Since we replaced the Accessibility Manager with the command prompt, it will start that instead.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Enter the command net user<\/strong> to see the list of users on the computer.<\/p>\n\n\n\n

Enter the command net user username newpassword<\/strong> (replacing “username” with the actual username, and “newpassword” with whatever you want the new password to be) to reset the user’s password.<\/p>\n\n\n\n

Close the command prompt and login<\/strong> with the new<\/strong> password<\/strong>.
<\/p>\n","protected":false},"excerpt":{"rendered":"

Step 1: Recovery Command Prompt from Windows Vista Install Disk Start the computer with the Vista install disk. At the Language\/Time\/Keyboard window press Next At this window, choose Repair your computer The Windows installer will take a few seconds to find the current Windows install. Once it does, select it and press Next At this … Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,2],"tags":[],"class_list":["post-13","post","type-post","status-publish","format-standard","hentry","category-tech","category-windows"],"_links":{"self":[{"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/posts\/13","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/comments?post=13"}],"version-history":[{"count":6,"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/posts\/13\/revisions"}],"predecessor-version":[{"id":25,"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/posts\/13\/revisions\/25"}],"wp:attachment":[{"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/media?parent=13"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/categories?post=13"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cstroik.com\/index.php\/wp-json\/wp\/v2\/tags?post=13"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}