|
Suggestion
Old thread, but I'm bored and here's a post anyway. Make a DOS boot disk and put NTFSDOS on it. As a matter of fact, I think you can download it from free from Sysinternals' site. Boot up the NT box you can't get into and run NTFSDOS. Actually, I'm assuming it's using NTFS. If it's FAT, then don't bother with NTFSDOS. Anyway, once you are able to access the drive that has the Winnt folder, copy the SAM file from the system32 directory to floppy (I think that's the directory.. it's been a long time since I've done this). Now, take the SAM file to a machine you can access and slap it into a dictionary/brute force cracker (such as L0phtcrack). You'll have to find the old free version somewhere on the Internet since L0pht went commercial and charges you for their latest version (LC4 I think). If you're hardcore about passwords, be prepared to leave the machine that's hacking the SAM file on for a long time. Last machine I did this to, it took 82 hours to crack the Admin password (and it was pure alpha).
|