Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Startup Password

Posted on 2014-11-23
24
Medium Priority
?
333 Views
Last Modified: 2014-12-08
Hello,
How can I fix this error : This computer is configured to require a password in order to start up.  Please enter the Startup Password below.

Password:  ______________

OK , or Restart buttons
,,

How can I fix , short of re-image / wipe drive ,, re install Windows
,,
?
?

Thanks-
0
Comment
Question by:mvalencia2003
  • 10
  • 7
  • 4
  • +1
22 Comments
 
LVL 12

Expert Comment

by:andreas
ID: 40461438
After you tried the above solution you should backup your important files and do a reinstall if possible to be sure you have a clean system. Windows XP isnt maintained by Microsoft anymore and so it does not get important security updates which makes it more easy for viruses to enter your system.

If above solution isnt working as the regback files are not good anymore, you can try to restore them from a RECENT backup of your system if you have one. Restoring from an old backup might not help much as the system has changed to much since and registry might not reflect the current configuration anymore.

To reinstall windows, just boot up from your XP-CD, choose the reinstall option. Once it askes for the partitions to install in choose the one that was your previous C drive. and Mark that partition for formating (quick, NTFS) to wipe out all files on that drive prior to reinstall.

If reinstalling is not an option for you you should at least do a malware scan from an anti virus boot CD not from the affected windows itself.
0
 
LVL 58

Expert Comment

by:McKnife
ID: 40461485
What you see is a startup password that has been configured in the bios of your machine. Depending upon what technology is used, it may be unbreakable.
0
 
LVL 63

Expert Comment

by:☠ MASQ ☠
ID: 40461496
This is NOT a BIOS password, this is SysKey - a Windows component.

Not that it's any easier to fix though - there are a few exceptional ways to repair this but generally it's too late to undo the damage done.

See http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/XP/Q_28526013.html
For similar cases
0
The Lifecycle Approach to Managing Security Policy

Managing application connectivity and security policies can be achieved more effectively when following a framework that automates repeatable processes and ensures that the right activities are performed in the right order.

 
LVL 58

Expert Comment

by:McKnife
ID: 40461501
Correct, syskey. I haven't seen that text for ages...sorry.
Syskey can be reset using the famous boot disk http://pogostick.net/~pnh/ntpasswd/ - at least it worked when I last did it. This is also linked in a link of MASQ's link.
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40461942
What was deleted ,
?
???
?????
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40462435
Can syskey password be removed with UBCD
?

,
What are steps ,,???
Thanks
- -
0
 
LVL 58

Expert Comment

by:McKnife
ID: 40462513
http://pogostick.net/~pnh/ntpasswd/walkthrough.html are the instructions for the disk I mentioned and syskey is mentioned inside, too.
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40464628
selected : 1 - Password reset [sam system security]
,
then tried : 1 - Edit user data and passwords ,, got error = SAM registry file is not loaded , !
-


only one available is : 9 - Registry editor, now with full write support!
0
 
LVL 58

Expert Comment

by:McKnife
ID: 40464671
Did you select the correct partition? Before you get to the "reset password things", you need to load the registry just as the walkthrough shows.
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40464726
I did now ,, but now I do not see option for :
2 - Syskey status & change

?
?
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40464734
when I first select Windows partition , next step I see :
-rwxrwxrwx  1  0        0        262144   Nov 17  21:55      SAM


,
?
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40464762
Step 3 : Password or registry edit ,,

<\SystemRoot\System32\Config\SAM>
,
ROOT KEY at offset : 0x001020 * Subkey indexing type is : 666c <lf>
,,, ,,, ,,, ... ... ...
0
 
LVL 58

Expert Comment

by:McKnife
ID: 40465289
"when I first select Windows partition , next step I see :  -rwxrwxrwx  1  0        0        262144   Nov 17  21:55      SAM" - do you only see that one line? In the walkthough (also in my experience), you see much more lines. Anyway, at that point you would select "1" for password reset and in the next step "2" for changing the syskey status.

Is that possible?
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40466036
2 - Syskey status & change , , is NOT available

,
?
?
0
 
LVL 58

Expert Comment

by:McKnife
ID: 40466083
Maybe you could do a couple of screenshots to illustrate what is going on instead?
0
 
LVL 63

Assisted Solution

by:☠ MASQ ☠
☠ MASQ ☠ earned 1000 total points
ID: 40466241
mvalencia2003, have you checked for restore points first?

Although ntpasswd will disable SysKey (it doesn't recover it) by disabling you will significantly damage the Windows install.  Don't forget the function of SysKey is to maintain system security, even though the SysKey password has been maliciously changed the function it is still doing that job.  With SysKey disabled you will damage the Security Hive and lose:

   - All locally stored encryption keys
   - Access to Terminal Services
   - Any system services (will not start as no longer authenticate)
   - Any service running not as LocalSystem will not start.
     (You’ll need to reset the credentials cache for each)
   - Scheduled tasks
   - All EFS-encrypted data (permanently lost)

This is a recovery method of last resort, it will allow you back into a crippled system that ultimately you will need to reinstall.

If you have no backups/restore points you will not be able to bring this system back to normal function.
0
 
LVL 58

Accepted Solution

by:
McKnife earned 1000 total points
ID: 40466657
Masq is right, after resetting syskey, we might have unwanted side effects (and I have seen those myself years ago). If those render the machine unusable beyond repair would have to be evaluated on a test system.
But right, I should definitely have mentioned it.

mvalencia2003, what is the purpose? Would you simply like to get the data off that drive and reinstall anyway or would you like to continue using that OS "at any cost"?
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40466667
get the data out
,,
0
 
LVL 63

Expert Comment

by:☠ MASQ ☠
ID: 40466887
If you just need the data off loaded can you see it when booting from another system connected to the drive?
If you have encryption it's lost anyway but if you can read the files you should be able to copy them to a safe location even though you may have to change the file permissions/ownership at some point.
0
 
LVL 4

Author Comment

by:mvalencia2003
ID: 40478389
can I get data by booting from Knoppix ,
?
?
- - -
0
 
LVL 63

Expert Comment

by:☠ MASQ ☠
ID: 40478469
If unencrypted, yes. Knoppix can read NTFS.
0
 
LVL 4

Author Closing Comment

by:mvalencia2003
ID: 40486520
Thanks,,
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

2017 was a scary year for cyber security.  Hear what our security experts say that hackers have in store for us in 2018.
In this tutorial, we’re going to learn how to convert Youtube to mp3 for Free. We'll show you how easy it is to make an mp3 from your video clips so that you can enjoy them offline.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question