This information is taken from the rather helpful chap over at studyhat.blogspot.co.uk might help.
Resetting windows password using linux livecd
- Put the livecd in the cd/dvd drive and boot your windows machine from the livecd. (The application that we are going to use is
In this example, we will be using fedora/ ubuntu livecd.)
Once booted, open the terminal and check for tool named
chntpw. If not there, you can install it using:
$ yum install chntpw
- if you're using ubuntu live cd:
$ sudo apt-get install chntpw
After the tool is ready, mount the windows partition. Use "fdisk -lu" to check which partition should be mounted. To mount /dev/sda1 (assuming your windows partition is on /dev/sda1), use below command:
$ su mount /dev/sda1 /mnt
Find SAM file on the windows partition. Usually it is located in Windows/System32/config. Run the chntpw on the SAM file.
$ cd /mnt/Windows/System32/config
List all user in the SAM record
$ chntpw -l SAM
Interactively edit user credential
$ chntpw -i SAM
Follow the wizard of chntpw and clear administrator or any user's password that you want to access.
Save changes and restart machine. You can access the windows without password for administrator and users that you have cleared
their password. Make sure you take out the livecd, otherwise the
machine will boot into it instead of windows.
chntpw version 0.99.6 080526 (sixtyfour), (c) Petter N Hagen
chntpw: change password of a user in a NT/2k/XP/2k3/Vista SAM
file, or invoke registry editor.
chntpw [OPTIONS] [systemfile] [securityfile] [otherreghive] [...]
-h This message
-u Username to change, Administrator is default
-l list all users in SAM file
-i Interactive. List users (as -l) then ask for username to change
-e Registry editor. Now with full write support!
-d Enter buffer debugger instead (hex editor),
-t Trace. Show hexdump of structs/segments. (deprecated debug function)
-v Be a little more verbose (for debuging)
-L Write names of changed files to /tmp/changed
-N No allocation mode. Only (old style) same length overwrites possible