Winternals LOCKSMITH User Manual

Locksmith

User’s Guide

Winternals Software LP

3101 Bee Caves Road, Suite 150

Austin, Texas 78746

[phone]

[phone] Fax

www.winternals.com

Copyright © 2002 Winternals Software LP

Locksmith

Table of Contents

1 Introduction................................................................................... 1

2 Requirements................................................................................2

3 Using Locksmith...........................................................................3

4 Locksmith Security Issues......................................................... 4

5 Technical Support........................................................................5

Winternals Software LP Page i

1 Introduction

Welcome to Locksmith, a utility that allows users to change the administrat or
password on any Windows NT/2000 system. If you’re locked out of a server
or workstation due t o a lost or forgotten administr ative password, Locksmith
bypasses the security system so that you can reset the password. The
program functions in a client/host mode, where the host is a working
Windows NT/2000 machine, and the client is the machine needing repairs.
Locksmith requires a copy of Remote Recover or NTRecover in order to
operate.

Locksmith

Winternals Software LP Page 1

2 Requirements

You must have the following components in order to install and run
Locksmith:

♦= A full copy of Remote Recover or NTRecover
♦= A Windows NT Workstat ion or Windows NT Server installation, which

will act as a host

♦= A Windows NT Workstation or Windows NT Server needing r ecovery.

This machine is the client.

♦= A standard null-modem cable (9- pin f emale to 9-pin female)
♦= One formatted 1.44MB floppy disk.

Locksmith

The two machines involved in the password recovery must run approximately
the same version of Windows NT/2000, such that the host and client versions
fall into one of the following groups:

Table 2-1

NT 3.51 Service packs 0-5

NT 4.0 Service packs 0-2

NT 4.0 Service packs 3-4

Windows 2000 RTM

Winternals Software LP Page 2

3 Using Locksmith

Locksmith runs in conjunction with Remote Recover or NTRecover to replace
passwords. Locksmith can only achieve Windows 2000 compatibility when
used with Remote Recover.

When you launch Locksmith it will first prompt you for the location of the
WinNT reg istry that needs to be changed. A drop down box appears which
displays all of the user accounts. Select the account whose password you
wish to change, and then enter the new password. When the program is
finished changing the password, unmount the client drives and reboot the
machine. When logging on, the new password should be in effect.

Locksmith

The password replacement does not affect any other attributes of the user
accounts, and does not destroy any information on the system.

Figure 3-1

Winternals Software LP Page 3

4 Locksmith Security Issues

Locksmith is designed as a tool for administrators, not for “crackers.”
Locksmith has no bearing on W indows NT/2000’s security rating, because it

requires physical access to the machine. In any computer system, true
security from break-ins is achievable only by physically isolating the computer
from distrusted individuals.

Those interested in additional inform ation on Windows NT/2000 securit y and
the impact of tools such as these may want to read “ Availability of C2
Security Compliant Windows NT”, available online at the following URL:

Locksmith

http://support.microsoft.com/support/kb/articles/Q137/0/18.asp

More information on C2 rated products is also available at t he NSA’s Trusted
Product Evaluation Program, which can be found online at :

http://www.radium.ncsc.mil/tpep/

Winternals Software LP Page 4

5 Technical Support

♦= If you encounter a problem with Locksmith and wish to receive

technical support, please e-mail us at:

[e-mail]

♦= You can also view our Frequently Asked Questions and download

free updates from our web site at:

http://www.winternals.com/support

♦= For urgent matters, please call the following number and request

Technical Support:

512-330-9861

Locksmith

Winternals Software LP Page 5