User manual WINTERNALS LOCKSMITH

Locksmith User's Guide Winternals Software LP 3101 Bee Caves Road, Suite 150 Austin, Texas 78746 (512) 330-9130 (512) 330-9131 Fax www.winternals.com Copyright © 2002 Winternals Software LP Locksmith Table of Contents 1 2 3 4 5 Introduction................................................................................... 1 Requirements................................................................................ 2 Using Locksmith........................................................................... 3 Locksmith Security Issues ......................................................... 4 Technical Support ........................................................................ 5 Winternals Software LP Page i Locksmith 1 Introduction Welcome to Locksmith, a utility that allows users to change the administrator password on any Windows NT/2000 system. If you're locked out of a server or workstation due to a lost or forgotten administrative password, Locksmith bypasses the security system so that you can reset the password. The program functions in a client/host mode, where the host is a working Windows NT/2000 machine, and the client is the machine needing repairs. Locksmith requires a copy of Remote Recover or NTRecover in order to operate. Winternals Software LP Page 1 Locksmith 2 Requirements You must have the following components in order to install and run Locksmith: = A full copy of Remote Recover or NTRecover = A Windows NT Workstation or Windows NT Server installation, which will act as a host = A Windows NT Workstation or Windows NT Server needing recovery. This machine is the client. = A standard null-modem cable (9- pin female to 9-pin female) = One formatted 1.44MB floppy disk. The two machines involved in the password recovery must run approximately the same version of Windows NT/2000, such that the host and client versions fall into one of the following groups: Table 2-1 NT 3.51 NT 4.0 NT 4.0 Windows 2000 Service packs 0-5 Service packs 0-2 Service packs 3-4 RTM Winternals Software LP Page 2 Locksmith 3 Using Locksmith Locksmith runs in conjunction with Remote Recover or NTRecover to replace passwords. Locksmith can only achieve Windows 2000 compatibility when used with Remote Recover. When you launch Locksmith it will first prompt you for the location of the WinNT registry that needs to be changed. A drop down box appears which displays all of the user accounts. Select the account whose password you wish to change, and then enter the new password. When the program is finished changing the password, unmount the client drives and reboot the machine. When logging on, the new password should be in effect. The password replacement does not affect any other attributes of the user accounts, and does not destroy any information on the system. Figure 3-1 Winternals Software LP Page 3 Locksmith 4 Locksmith Security Issues Locksmith is designed as a tool for administrators, not for "crackers." Locksmith has no bearing on Windows NT/2000's security rating, because it requires physical access to the machine. In any computer system, true security from break-ins is achievable only by physically isolating the computer from distrusted individuals. Those interested in additional information on Windows NT/2000 security and the impact of tools such as these may want to read "Availability of C2 Security Compliant Windows NT", available online at the following URL: http://support.microsoft.com/support/kb/articles/Q137/0/18.asp More information on C2 rated products is also available at the NSA's Trusted Product Evaluation Program, which can be found online at: http://www.radium.ncsc.mil/tpep/ Winternals Software LP Page 4 Locksmith 5 Technical Support = If you encounter a problem with Locksmith and wish to receive technical support, please e-mail us at: support@winternals.com = You can also view our Frequently Asked Questions and download free updates from our web site at: http://www.winternals.com/support = For urgent matters, please call the following number and request Technical Support: 512-330-9861 Winternals Software LP Page 5