Petri IT Knowledgebase Forums
 

Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Security > Forgot Administrator Password
Petri.co.il is happy to award auglan the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

Notices

Strange 'default' password for Administrator account after attempted Recovery

Strange 'default' password for Administrator account after attempted Recovery

this thread has 20 replies and has been viewed 6004 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 1st February 2010, 00:51
mattdevney mattdevney is offline
Casual
Casual
 
 Join Date: Jan 2010
  6 month star 12 month star
 Location: United Kingdom
 Posts: 12
 Reputation: mattdevney is on a distinguished road (10)
Default Strange 'default' password for Administrator account after attempted Recovery

Hi, I hope you guys can help, as I'm at my wit's end here.

Running a Dell Dimension XPS Gen 5 (circa 2005), with XP SP3

Had a reboot after making a couple of small registry changes (don't ask). Came up with following error message after CMOS and BIOS:

Windows could not start because the following file is missing or corrupt : \WINDOWS\SYSTEM32\CONFIG\SYSTEM
You can attempt to repair this file by starting Windows Setup.
Select 'r' at the first screen to start repair.

Well, I googled that and worked out I had a broken registry. To fix that I apparently needed to repair XP from the recovery console by using the original system file (c:\windows\repair\system.bak), and backing up the old one.
I'm aware now that I could've tried some simpler options before resorting to this procedure, but I trusted the google rank of the results returned. I should have come here first.... In any case...

I did that using my Windows XP Setup disk (service pack 2). During this I was asked for the Administrator password, which I knew to be blank, and restarted, thinking that my problems were over. After restart, I got the same error, so I assumed that the fix didn't work and I should try another solution.

So I went back into the recovery console to restore the backed up system file, only this time, when I was asked for the administrator password, it didn't accept a blank password, nor did it accept other obvious things (Admin, admin, Administrator, administrator, Dell, dell) and that's when I got really worried.

I then tried a repair install of Windows (going past the license agreement and then repairing, not installing), as one solution was to get to the point of the install of devices and then pressing shift+F10. This attempt got through to the Windows XP bootscreen (with the blue progress bar at the bottom) but after that I got this message:

lsass.exe - System Error
"When trying to update a password the return status indicates that the value provided as the current password is not correct."

(for about a tenth of a second before it rebooted automatically).

I then tried a cd-rom of the XP Pro Setup disk (slipstreamed) which is the only other setup disk I have acess to, and this successfully entered recovery console, but only recognized the H: drive, and this was the cd-rom itself.

And now I'm lost. Can anyone help? I really do not want to wipe my HDD clean. Just been informed that my in-the-cloud data backup is not working and I will lose all my data. What I'm really looking for is a way to identify the odd Admin password that a default system file has included without my knowledge, go back to the Recovery Console and restore the original system file, and then use Last Known Good or an XP repair.

Other alternatives I've seen include getting a set of boot floppies, or an XP setup cd-rom for Windows 2000 server or professional, or buying a specific password recovery bootable cd, or just a version on recovery console without asking for an admin password. But I don't know what the mileages is in any of these and with every attempt I'm worried I'm losing more and more chances to get my system back the way it was.

A USB boot would be helpful too, as I do not have another PC with a floppy drive or cd burner (I can get to a PC with a floppy drive, but it's not exactly the most elegant or swift solution).

Apologies for the huge post, I hope that I've included enough information and haven't fallen foul of any forum rules.

Many thanks in advance.

Matt
  #2  
Old 1st February 2010, 03:25
biggles77's Avatar
biggles77 biggles77 is offline
Administrator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: Nowhere that I like.
 Posts: 10,762
 Reputation: biggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to behold (734)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Before you do any more messing around with it, remove the HDD from the machine, attach to another working machine and save your Data (including PST and NK2 files if you use Outlook plus Favorites if you use IE or Bookmark.htm if you use Firefox).

Once you have done that post back and we will see what suggestions we can come up with. I have also had that error but my only option was to do a clean install.
__________________
"There I stood at the bar, wearing a Mae West, no jacket, and beginning to leak blood from my torn boot. None of the golfers took any notice of me - after all, I wasn't a member!" Kenneth Lee - after being shot down during the Battle of Britain on the 18th August 1940.

************************************************** **********************
** Remember to give credit where credit is due and leave reputation points where appropriate **
************************************************** **********************
  #3  
Old 2nd February 2010, 00:32
mattdevney mattdevney is offline
Casual
Casual
 
 Join Date: Jan 2010
  6 month star 12 month star
 Location: United Kingdom
 Posts: 12
 Reputation: mattdevney is on a distinguished road (10)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Hi biggles77. Thanks for the reply. The drive is actually two hdd configured as a Intel Array, RAID 0. That's what it came like out of the box, I didn't do any custom install stuff on it. Does that make it easier, or (I expect) harder, to copy things off it?

Also, I won't be able to do any copying until the weekend though, as my time during the week is pretty much filled with 'real life'. I hope that's an acceptable attitude. If you want to restrict your posting similarly I will not be offended, but I will be checking daily and if I have any information to share I will do it asap.

I want to thank you again for your attention - I know at least, that I will learn something important (I already have), and hope that it is not too onerous for you to aid me.

Matt
  #4  
Old 2nd February 2010, 07:13
biggles77's Avatar
biggles77 biggles77 is offline
Administrator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: Nowhere that I like.
 Posts: 10,762
 Reputation: biggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to behold (734)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Hope you got all your important data backed up. RAID 0, IMO, is the scum of the Earth. If 1 HDD fails, you lose EVERYTHING!!!

There is a file that can be deleted from the Recovery Console that will remove the password and hopefully allow you to logon. I can't for the life of me find my reference to the file and they guy who told me about it is not answering his effing mobile phone.

Someone reading this may know of it or even come up with a different solution.
__________________
"There I stood at the bar, wearing a Mae West, no jacket, and beginning to leak blood from my torn boot. None of the golfers took any notice of me - after all, I wasn't a member!" Kenneth Lee - after being shot down during the Battle of Britain on the 18th August 1940.

************************************************** **********************
** Remember to give credit where credit is due and leave reputation points where appropriate **
************************************************** **********************
  #5  
Old 4th February 2010, 02:53
mattdevney mattdevney is offline
Casual
Casual
 
 Join Date: Jan 2010
  6 month star 12 month star
 Location: United Kingdom
 Posts: 12
 Reputation: mattdevney is on a distinguished road (10)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Thanks for the information Biggles. I knew that smart-alec HD config would bite me eventually. I've got some backups, but not the children's christmas video or latest e-mails etc. Would using a knoppix live CD to get the rest help? Hmm... I'm going outside the context of this sub-forum aren't I?

Does anyone think "A little knowledge is a dangerous thing" is sounding very apt right now?

Anyway, locating a spare usb hdd, and doing what I can to copy essentials is my next task. I'll post again when I've got further, but trust me I'll be lurking just in case someone has a brilliant idea in the meantime. Thanks.
  #6  
Old 4th February 2010, 07:17
biggles77's Avatar
biggles77 biggles77 is offline
Administrator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: Nowhere that I like.
 Posts: 10,762
 Reputation: biggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to behold (734)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Quote:
I'm going outside the context of this sub-forum aren't I?
No, not really since it still relates to you getting back into your HDDs, preferably by recovering the password.

Was the HDD partitioned at all? I mean, was the operating system installed on the C Drive and the data kept/backed up on the D Drive? If it was then you may be able to do a clean install on XP on the C partition and still be able to recover the data. I am assuming the RAID 0 was setup through an onboard RAID controller. This is a LAST resort option and we still need to find out if this is possible. Remember I have ZERO experience with RAID 0. If the RAID 0 was setup through the operating system then you are cactus!! Assuming that it is an onboard setup, then if you reinstall the O/S, do NOT format the drive (partition) that you install it on. This may make a new profile and save any data that was in the original profile. Remember, this is LAST option.

The Knoppix live CD is also something I haven't used so I am unable to assist with that. Someone reading this will hopefully be able to provide and answer.

Find an XP install CD that hasn't been slipstreamed and try the MS fix. http://support.microsoft.com/kb/307545

You could also check out the other links and see if they might help. http://www.google.com.au/search?hl=e...ta=&aq=null&oq=
__________________
"There I stood at the bar, wearing a Mae West, no jacket, and beginning to leak blood from my torn boot. None of the golfers took any notice of me - after all, I wasn't a member!" Kenneth Lee - after being shot down during the Battle of Britain on the 18th August 1940.

************************************************** **********************
** Remember to give credit where credit is due and leave reputation points where appropriate **
************************************************** **********************
  #7  
Old 10th February 2010, 19:42
mattdevney mattdevney is offline
Casual
Casual
 
 Join Date: Jan 2010
  6 month star 12 month star
 Location: United Kingdom
 Posts: 12
 Reputation: mattdevney is on a distinguished road (10)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Right - I've ordered a USB HDD - they're getting cheap these days aren't they? That'll come at the weekend. In the meantime, to answer your questions - the RAID 0 was set up using the controller, not the OS, but Dell didn't try to do anything clever with it (or maybe at the time I didn't try to do anything clever with it) and everything is on the C: drive *sigh*.

I've booted up the Knoppix Live CD and that worked, but I couldn't access my HDD. That may be due to my inexperience with the OS, rather than a ruined disk though.
  #8  
Old 11th February 2010, 08:40
biggles77's Avatar
biggles77 biggles77 is offline
Administrator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: Nowhere that I like.
 Posts: 10,762
 Reputation: biggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to behold (734)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Did the Knoppix disc have the RAID drivers installed on it? Unless the CD has the RAID drivers you will not see your RAID 0 HDD.
__________________
"There I stood at the bar, wearing a Mae West, no jacket, and beginning to leak blood from my torn boot. None of the golfers took any notice of me - after all, I wasn't a member!" Kenneth Lee - after being shot down during the Battle of Britain on the 18th August 1940.

************************************************** **********************
** Remember to give credit where credit is due and leave reputation points where appropriate **
************************************************** **********************
  #9  
Old 14th February 2010, 14:19
mattdevney mattdevney is offline
Casual
Casual
 
 Join Date: Jan 2010
  6 month star 12 month star
 Location: United Kingdom
 Posts: 12
 Reputation: mattdevney is on a distinguished road (10)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Right! Apologies for the long delay. To give the details in as succinct as way as possible:
  • It wasn't knoppix, it was knoppix std so the tools and utilities were all cli and I didn't have the time to look it all up. So I put that to one side.
  • The ext HDD arrived, and it wasn't broken in transit, which was good.
  • I created a usb boot of ubuntu 9.10 and booted my borked pc off that, which worked (dual monitor caused some display issues for a while, but easily rectified).
  • mounted my ntsc ext HDD and copied everything from my C drive across (the raid set-up was instantly recognised by ubuntu).
  • made sure the copy worked by attaching my hdd to my laptop and took a quick look at some docs.
So, what now!? I'm in two minds as to rebuilding my pc - on the one hand, it would allow me to more efficiently use space (and possibly dual-boot it), but on the other hand I will lose all the customisation and settings I have, which I will have trouble remembering.

But overall, I think having the option to keep everything would be the best way forwards.

Any ideas?

PS: Anyone else who wants any tips on doing any of the above from someone who has just gone through it are welcome to contact me. I presume there's a way to leave a PM on my profile?

PPS: Biggles - only just now noticed the reputation link on each post. I'll sort that out now.

Last edited by mattdevney; 14th February 2010 at 14:27.. Reason: Offer to help anyone else with doing this
  #10  
Old 15th February 2010, 17:38
biggles77's Avatar
biggles77 biggles77 is offline
Administrator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: Nowhere that I like.
 Posts: 10,762
 Reputation: biggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to beholdbiggles77 is a splendid one to behold (734)
Default Re: Strange 'default' password for Administrator account after attempted Recovery

Quote:
Originally Posted by mattdevney
PS: Anyone else who wants any tips on doing any of the above from someone who has just gone through it are welcome to contact me.
Please post any tips etc in this thread so they can be shared with the rest of our Community. That is after all what this site is all about. Sharing the Knowledge.

Considering the prices of HDDs, I would suggest, if you have important files, it to:
  1. Create a RAID 1 on your PC
  2. Connect an external HDD either USB or eSATA and configure an auto backup schedule
  3. Backup into the "cloud" from one of the numerous options
Personally I never have less than 3 different file locations for my important data.
__________________
"There I stood at the bar, wearing a Mae West, no jacket, and beginning to leak blood from my torn boot. None of the golfers took any notice of me - after all, I wasn't a member!" Kenneth Lee - after being shot down during the Battle of Britain on the 18th August 1940.

************************************************** **********************
** Remember to give credit where credit is due and leave reputation points where appropriate **
************************************************** **********************
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Override user account password as administrator onewayor Windows Vista 2 14th July 2008 04:36
windows 2003 Administrator password recovery egman Forgot Administrator Password 2 27th January 2008 10:15
Administrator password for the recovery tool vgvertex Windows 2000 Pro, XP Pro 2 24th May 2007 17:06
Urgent Windows SBS 2003 - Administrator Account Recovery user6356 Forgot Administrator Password 1 2nd August 2005 14:30


All times are GMT +3. The time now is 01:29.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri