Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Select an option

  • Save BertMueller18/7027fcaef6728c8bd8bf37e593b78d0b to your computer and use it in GitHub Desktop.

Select an option

Save BertMueller18/7027fcaef6728c8bd8bf37e593b78d0b to your computer and use it in GitHub Desktop.
Windows 8 - 10 Password reset
Research:
http://www.pcworld.com/article/249181/how_to_reset_your_windows_password.html
http://piotrbania.com/all/kon-boot/
http://cdslow.org.ru/en/ntpwedit/
http://theoven.org/index.php?topic=1103.0
https://pogostick.net/~pnh/ntpasswd/
http://reboot.pro/topic/18588-passpass-bypass-the-password/page-14
http://www.top-password.com/reset-windows-password.html#compare
Requirments:
WinPE or a second Account on the System that is Admin
WinPE:
If WinPE then you need to start RegEdit and mount the SAM hive (C:\windows\system32\config\SAM).
If second Account you need RunAsSystem or DevxExec and run RegEdit with it or you take ownership of the Keys which i don't recommend though.
HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\Names
Select the Name you want to convert and look at the Default Value it will say something like 0x3F5
HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account\Users\
Select the 000003F5 Key (Choose the one that has the same numbers as you just saw)
Delete the following Values but be sure to keep "V" and "F", Important that you do not delete "V" and "F"
InternetUserName
InternetProviderGUID
InternetUID
InternetSID
CachedLogonInfo
These are removable ^^ !
Select the "V" Key
Go to 00A8 in key "V", select the 5th Byte and change it to 00
(see first screenshot)
Create a "ForcePasswordReset" DWORD Value and set it to 1, now you get Asked to change your Password when you login, but you don't have to type any password, just click ok.
(see second screenshot).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment