WINDOWS PASSWORD RECOVERY WITH THE HElP OF LINUX

Step 1: Boot in to Linux.

Put the burned disk in the drive (or boot from USB) and boot in to the Live edition of Linux. You should use the standard Live session.

Step 2: Find the Windows partition

Open Nautilus (the GNOME file manager) and follow these steps:

1. Hit the Ctrl-L key combination to open the Location bar (Figure A).
2. Enter the string "computer:///" (no quotes).
3. Locate the drive (or partition) that contains your Windows installation.
4. Right-click the Windows drive icon and click Mount.
5. Double-click the icon to open the Windows drive (or partition) and make note of where the drive is mounted (it will be listed in the location bar).  

   

Step 3: Get to the command line

It's time to open a terminal window and begin (or continue) your journey into the Linux command line. You must install the small tool called chntpw. To install this application, issue the command: sudo apt-get install chntpw. With that application installed, you are ready to go. Follow these steps to get the password changed:

1. Change into the directory containing Windows with the command cd /PATH/TO/WINDOWS (PATH/TO/WINDOWS is the complete directory path to your Windows drive).
2. Change into the Windows/System32/config directory.
3. Issue the command sudo chntpw SAM.

You should now see the chntpw screen (Figure B). Here you have five options:

• Clear user password
• Edit user password
• Promote user (make user an administrator)
• Unlock and enable user account
• Quit

4. Change into the directory containing Windows with the command cd /PATH/TO/WINDOWS (PATH/TO/WINDOWS is the complete directory path to your Windows drive).
5. Change into the Windows/System32/config directory.
6. Issue the command sudo chntpw SAM.

You should now see the chntpw screen (Figure B). Here you have five options:

• Clear user password
• Edit user password
• Promote user (make user an administrator)
• Unlock and enable user account

• Quit

 

Enter "q" for quit. We're going to make sure we are working with a specific user. To list out all users in the SAM file, issue the command sudo chntpw -l SAM. This will list out all of the users on the system. As you can see in Figure C, my name is listed as one of the users. Figure C

 

   

To work with a specific user, issue the command sudo chntpw -u "USER NAME" SAM (USER NAME is the actual username). If the username is only one word, you will not need the quotes. If the username is a full name, place it within quotes or the command will not work. Once you are back in the edit screen, do the following:

1. Type "2" (no quotes) to go into edit mode.
2. Type the new user password.
3. Hit the Enter key.
4. Type "y" (no quotes) followed by Enter to write the file.

Your Windows User password should be changed. Reboot into Windows to make sure the edit worked. If it did not work, go through the steps once again and, this time, blank the password instead of editing it. To blank the password, do the following:

1. Enter the edit screen for the specific user.
2. Type "1" (no quotes).
3. Hit Enter.
4. Type "y" (no quotes).
5. Hit Enter.

At this point the user account should have no password. You can reset the password once you successfully log in to Windows.