Password Removal Tool – User Guide This tool should be used from
Contents
1. Password Removal Tool User Guide This tool should be used from the Windows Pre lInstallation Environment WinPE or Windows Forensic Environment WinFE If the tool is used from WinFE the drive that contains the SAM hive file should be MOUNTED and set to READ WRITE NOTE This is not a forensically sound tool 1 Run the Passkill exe executable 1 Mount the target SAM hive dive must not be write protected 2 Highlight an account from the list then press the Select button a Make any changes then press the Update button 4 Press the Exit button to unmount the SAM and quit Account Mame LANMAN Password NT Password 4 checked box will indicate that the password is enabled 2012 Colin Ramsden Part of the WinFE LE Use Only 2 Click the Mount SAM button then navigate to the location of the SAM hive which is usually lt Suspect Drive Letter gt Windows System32 Config then select the SAM hive file 3 The list box should now be populated with all of the user accounts present for that installation of Windows ya User Accou nts from SAN 1 Mount the target SAM hive drive must not be write protected 2 Highlight an account from the list then press the Select Button a Make any changes then press the Update button 4 Press the Exit button to unmount the SAM and quit Administrator HomeGrouplser Account Hame LANMAN Password NT Password checked bos mill indicate that the2. password i enabled 2012 Colin Ramsden Part of the WinFE LE Use Only 4 Highlight the user account name you wish to check the password status for then click the Select button As can be noted for the account Karl there is an NT Password protecting the account Indicated by the checked box x 1 Mount the target SAM hive drive must not be write protected 2 Highlight an account from the list then press the Select button 3 Make any changes then press the Update button 4 Press the Exit button to unmount the 54M and quit Administrator Guest HomeGroupll zert Account Mame Kall F LANMAN Password NT Password A checked bos will indicate that the password i enabled 2012 Colin Ramsden Part of the WinFE LE Use Only 5 To remove the password simply uncheck the box es then click the Update button 6 Repeat this process for each account that you wish to remove the password from 7 When finished click the Exit button this is very important as the SAM hive is dismounted by this action 8 The passwords can be reapplied should it be required by re checking the boxes that were un checked
Download Pdf Manuals
Related Search