[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 295
  • Last Modified:

Break XP Passwords

I have some compters that are on a domain and I have the domain login info but not the local login info such as admin.

What is the best way to break the local password? Is there a way to do it once logged into the domain?
0
ATL74
Asked:
ATL74
  • 3
  • 2
  • 2
  • +4
11 Solutions
 
John HurstBusiness Consultant (Owner)Commented:
If you have the domain administrator permission, you can log into the XP machine and then change the local administrator password.   ... Thinkpads_User
0
 
Neil RussellTechnical Development LeadCommented:
You can use a domain group policy to set Local user accounts and passwords. Or user the Group polict to add yourDomain administrator account to the computers Local Administrators Group. Then you will have permissions to reset/change local passwords.

REMEMBER

Changing a users password manually CAN result in them losing access to ALL there previuosly saved data in their profile.
0
 
Arman KhodabandeCommented:
This may help you:
http://www.petri.co.il/forgot_administrator_password.htm

Or you can download the following file:
[LINK REMOVED TO AN UNIDENTIFIED SOFTWARE]

Just Change the extension from Jpeg to ISO and burn it to a CD and boot the computer to change password.

This may also help you :
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_27268116.html
0
A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

 
abbrightCommented:
The passwords are stored in a hashed format on the local computer which means that you cannot "break" the password directly. [MODERATOR EDIT]. If you just need to get access to the accounts you can reset the passwords being domain administrator as the first comment already stated.
0
 
pma111Commented:
If you systems are based on an image dont be suprised if the local admin password is the same for all machines? So do you have any admin password?

I assume putting or naming tools is a no go but if you google:

[MODERATOR EDIT]
0
 
pma111Commented:
But not quite ;)
0
 
aleghartCommented:
The question was answered the first time.  If you are the domain administrator, you don't need to break anything.  Login as the domain admin and change the local administrator password.  Disable or delete any other accounts that have local admin rights.

If you fear loss of encrypted files because a local user is using password protection, then just disable those accounts until the user can contact you to retrieve the files and move them to a domain account.

Straightforward.  No need for hacking tools.
0
 
ATL74Author Commented:
Is there a way to sync the local admin account password with a domain admin account.

Example Local admin password / hill

Domain admin password / hill

Change domain admin passoword to apple and the local is still hill. Is there a way to make the local change with the domain.
0
 
John HurstBusiness Consultant (Owner)Commented:
>>> Is there a way to sync the local admin account password with a domain admin account.

The two things are different. The passwords can be the same, but they do not sync. They are designed to stand apart and be distint. ... Thinkpads_User
0
 
ATL74Author Commented:
Is it a good or Bad practice to make them the same and Why?
0
 
John HurstBusiness Consultant (Owner)Commented:
I keep server (domain) passwords different that PC passwords as matter of logical security. I would view making them the same as bad practice in general. ... Thinkpads_User
0
 
abbrightCommented:
I'd consider those XP-passwords only emergency, recovery passwords. Usually since the machines are joined to the domain the domain-admins's account is sufficient for all tasks. So keep the XP passwords secure (only for the people who deploy the machines initially) but don't use them for everyday administration. And keep the domain admin's password different. One reason might be that it might happen that a user far away without network access on his laptop needs for whatever reason administrative access to the machine and the only way is the XP-admin's password to achieve this. If the domain admin's password was the same you'd have a problem. So if you can afford it you could even have a different XP admin's password on every machine, but this would increase administrative overhead of course. It's all a matter convenience vs. security.
0
 
aleghartCommented:
Compromised domain passwords can be changed quickly in one place.  Local passwords not so easy, especially at remote sites or mobile users.  There is no "sync" between domain & local.
0

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

  • 3
  • 2
  • 2
  • +4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now