Drive: How to Retrieve Passwords in Windows Xp

This updated guide examines Drive: How to Retrieve Passwords in Windows Xp and organizes the essential facts, background, and practical takeaways in clear American English.

Responsible-use note: Apply security techniques only to systems you own or are explicitly authorized to test.

Method 1of 5:

Resetting a Password as an Administrator

1. Log in as an administrator. Accounts that have administrative privileges can change any other user's password. You can do this if you can use the username and password for an administrator's account to log in with admin privileges).^[1]
2. Open the Start menu and click 'Run. ' A text box will appear.
3. Typecmdinto the text box and press↵Enter. This will open a command prompt window.
4. Typenet user [Username]*. For example,net user Wiki *(if 'Wiki' is the account that needs a new password). Make sure there is a space between*and the username as shown, then press↵Enter.
5. Type a new password, then press↵Enter. You'll be asked to confirm the password by typing it again. Once the password is confirmed, it can be used to access the account.

Method 2of 5:

Using a Windows XP CD

1. Insert your Windows XP CD into your CD-ROM drive. This method will only work if you have a bootable Windows XP CD. If it's an original Windows XP CD then it will be bootable. If it's a burned CD, it may not boot, but there's no way to know unless you try.
2. Reboot your computer. When the computer restarts, you'll see a message that says 'press any key to boot from disk.' Press a key on the keyboard.^[2]
   • If the computer boots up without asking you to press a key, then the Windows XP CD you're using isn't bootable.
   • You can borrow Windows XP CD from someone (or have someone burn you a bootable copy). It doesn't have to be the same CD that came with this version of Windows.
3. Press theRkey to 'repair' your installation.
4. Press⇧Shift+F10when the screen says 'Installing Devices. ' This will open a command prompt.
5. TypeNUSRMGR. CPLand then press↵Enter. This will open the User Account Control Panel, where you will be able to reset any password by selecting a user and adding a new password.

Method 3of 5:

Booting into Safe Mode with Command Prompt

1. Find an existing Administrator username to use if possible. There is no password set by default on the administrator account, so this can work unless someone has already configured a special password for the Administrator account. In some cases, there will be no password assigned yet.
2. If you need a password, assign one to any existing username while in the "safe mode with command prompt": Restart the computer while tapping the required, special key to activate the startup menu. To find the special key for your computer, try tapping a key rapidly while rebooting. TryEscorF2orF8orF10and watch for the menu to show up on a black screen (if you don't know that special key). ( Alternatively: unplug the electrical cord of your computer while it is running -- wait about 10 second -- then replug it. Now boot it again, and it will usually display a startup menu to choose normal or safe mode for startup. )
3. Select 'Safe Mode with Command Prompt. ' Quickly use the↑and↓keys to highlight your selected choice. You have a limited time to read, choose it and to press↵Enterto begin your chosen startup process -- or else it will boot up normally, if so try again.
4. Retrieve a list of all of the users/accounts on the computer. Type the magic command:net userat the command prompt, and press↵Enter.^[3].
5. Select the username to be assigned the new password. Type, for example,net user Wiki 12345678where 'Wiki' is the existing username needing a password by, for example, typing 12345678 to create your new password you chose ( 12345678 ). Now, press↵Enterto continue.
   • Instead of retyping a command you can edit it, to correct it: UseF3to bring back your last command, and edit it using←and→cursor keys and theDeleteand←Backspaceand type your correction and press↵Enter.
6. Typeshutdown –rwhen you are ready to restart your computer. The computer will restart normally, and the user whose password you've changed will now be able to log in with your newly assigned password.

Method 4of 5:

Booting from a Linux CD

1. Boot the machine with a 'live' version of Linux. Ubuntu is recommended by experts.^[4]A 'live' version allows you to boot into Linux without installing it. Put the disk into your CD Rom drive and restart the computer. When prompted to 'press any key to boot from CD,' press any key.
2. Access the live Linux desktop. Depending on the version of Linux you're using, you may be prompted to choose a version to use. Choose 'Live' or 'Try Linux' to access the Linux desktop.
3. PressCtrl+L. This will open the location bar.^[5]
4. Typecomputer:///and press↵Enter. Make sure you type all 3 slashes (/). A list of hard drives will appear.
5. Mount the Windows drive. Right-click on the hard drive that contains your Windows installation and select 'Mount.' If there's only one hard drive in the machine, it will be the drive that doesn't say 'System Reserved.'
6. Double-click the Windows drive. Now look at the top of the screen where you previously typedcomputer:///. Write down (or copy) the full path that now appears in that window. You'll need it in a minute.
7. PressCtrl+Alt+Tto open the command prompt. ^[6]You'll be entering a series of commands into this terminal window, and they are all case sensitive.
8. Enter the Windows drive through the terminal. Typecd /path/to/windows/drivewhere '/path/to/windows/drive' is the full path that you previously wrote down or copied. Press↵Enterto continue.
9. Typecd Windows/System32and press↵Enter. Do not type a slash, "/", in front of the word Windows. The directory names and path is case sensitive here.
10. Install and run the 'chntpw' tool. Type insudo apt-get install chntpwand press↵Enterto install. Once you are returned to the command prompt, typesudo chntpw –u username SAM. Replace the word 'username' with the account name of the Windows user whose password you want to erase, and remember that everything is case-sensitive. Press↵Enterto show a list of options.
11. Press1to clear the user's password. Press↵Enter, thenyto confirm that you want to erase the password.
12. Reboot into Windows. Press the 'power' icon at the top right of the screen to reboot the computer. Boot into Windows first removing the Linux CD. When the Windows login screen appears, you can now log in to the affected account without a password.

Method 5of 5:

Accessing Files Without a Password by Putting the Hard Drive in Another PC

1. Understand the process. Use this method if you're unable to get the user's password with other methods. This method won't allow you to find or reset the password, but you can access the user's files so that their data is not lost. You'll need administrative access to another Windows computer for this to work.
   • You will be temporarily removing the hard drive from the Windows XP PC and installing it in the second PC. To use this method, you'll need to have some familiarity with removing a hard drive from a PC as well as putting a hard drive in an external USB hard drive enclosure.
   • If you don't have an enclosure, you could also put the hard drive in the other PC.
   • If the computer with the missing password is a laptop, the instructions are similar, except you'll definitely need an external hard drive enclosure to connect a laptop hard drive to a desktop computer (and vice-versa).
2. Remove the hard drive from the Windows XP computer with the missing password. With the computer turned off and unplugged, open the case and disconnect the hard drive.
3. Put the hard drive into an external drive enclosure and connect it to the other PC. Alternatively you could open the second PC and install it.
4. Boot the second PC and log in with its Administrator account. Because you're logged in as an administrator and have the other hard drive connected to the computer, you now have access to everything on the other hard drive.
5. Copy any data you need from the Windows XP hard drive to the second PC. Press⊞Win+Eto open the File Explorer.
   • The second hard drive will show under 'Computer' or 'This PC,' depending on the version of Windows you are using. Double-click this drive and navigate to the user's files, which are located in C:WindowsDocuments and SettingsUser, where 'User' is the name of your user.
   • Press⊞Win+Eagain to open a second instance of the File Explorer, which will make it simple to drag files from your user's directory to the second computer. You can drag the files anywhere, including a flash drive.
6. Put the drive back into the original computer. While you haven't recovered the password, you've copied the user's files so they haven't lost any data.