Solved

Copy cached Xp password from one PC to another

Posted on 2010-09-15
7
516 Views
Last Modified: 2012-05-10
Hi folks

I have two Windows Xp machines. My account on both machines used to have identical passwords, connected to a domain. I access the network via VPN.

I changed the password on one of the machines (and this change has obviously rolled through Active Directory). Now the other can't connect correctly to the domain. I can still log in to the machine, but when I VPN in it appears to connect but I get messages to lock and unlock the computer. I've done this several times but no luck.

How do I copy the cached password from the one to the other?
0
Comment
Question by:RogerIvy
7 Comments
 
LVL 10

Expert Comment

by:jorlando66
ID: 33683135
You can't copy cached passwords.  You may be able to copy the security reg hive from one machine to the other but you would still need to access the registry on the machine you are locked out of.  Try downloading one of the many XP password reset disks out there so you can get into the locked machine.  Then log onto the vpn with your new password.
0
 

Author Comment

by:RogerIvy
ID: 33683293
I can access the registry on both machines, does this help?
0
 
LVL 31

Assisted Solution

by:Justin Owens
Justin Owens earned 166 total points
ID: 33683772
No... It is hashed.  You just cannot copy cached passwords...  To sync your password, you have to physically connect to the domain BEFORE you log in.  Set your VPN to authenticate before your AD does, if you can do that, or take your machine to a place where you can physically connect.

Justin
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 22

Assisted Solution

by:Adam Leinss
Adam Leinss earned 166 total points
ID: 33683906
You can try exporting HKLM\Security\Cache from one laptop to another.  You will need to run regedit under the account SYSTEM since the SYSTEM account is the owner of this key.  You can do this by using psexec from the Sysinternals PSTOOLS suite:
psexec -s -i regedit.exe
But I wouldn't recommend it...Microsoft goes out of their way to lock you out of this specific registry branch.  You can't just log in as an Administrator and open the key...you have to impersonate yourself as SYSTEM.
0
 
LVL 10

Accepted Solution

by:
jorlando66 earned 168 total points
ID: 33684209
You can log into the vpn before logon by selecting "logon using dial up networking"  Log into the vpn with your correct password and it will auth you into the domain. Or bring the machine into the office and log in there.  I have copied security hives in old versions of windows (98, original XP and 2000 server with some success but have also hosed a machine or two along the way.  Best bet is the vpn or physically bringing the box into the office.
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 33957849
I have no objections to that resolution.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

One of the biggest threats facing all high-value targets are APT's.  These threats include sophisticated tactics that "often starts with mapping human organization and collecting intelligence on employees, who are nowadays a weaker link than network…
As technology users and professionals, we’re always learning. Our universal interest in advancing our knowledge of the trade is unmatched by most industries. It’s a curiosity that makes sense, given the climate of change. Within that, there lies a…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question