PDA

View Full Version : Lost Usernames In Windows Xp Home


Watto
11-03-2005, 04:00 PM
My Dad brought home his laptop today and all the usernames are missing from the welcome screen

Even pressing ctrl + alt + del and manually entering usernames and passwords does not work.

Same in safe mode.

My Dad needs the laptop for his work and it contains valuable accounting info and one time only software.

He also has upto date Norton Internet Security 2004 so while I am not ruling out a virus I think it unlikely.

Any help would be much appriciated.

AlCaTrAzz
11-03-2005, 04:41 PM
corrupt SAM file?

Icefire
11-03-2005, 04:45 PM
I'd install windows over the current installation without a format.

Lesson to be learned here kids, backup important documents.

ViLLaN
11-03-2005, 04:52 PM
Use the Offline NT Password Changer -

http://home.eunet.no/~pnordahl/ntpasswd/

It will list the available usernames when booted and allow you to change the password.

Another option is Locksmith from Winternals -

http://www.winternals.com/

It does the same thing, but has a GUI.. Also costs money.. ONTPC is free...

Assuming the SAM isnt corrupted, you should adleast be able to see available usernames and change the password if needed.

Watto
11-03-2005, 06:36 PM
Tried the offline NT password changer and it said

"Usernames could not be found"

HELP !!!

PHOENIX_12
11-03-2005, 06:56 PM
not even the admin account working?

u know @ this point i would probably format and re load backups after scaning them 4 viruses but that's just me

ViLLaN
11-03-2005, 08:06 PM
Your SAM file is screwed.. Repair install of Windows XP is about it ;)

PHOENIX_12
11-03-2005, 09:07 PM
mind if i ask wtf a SAM file is?

ViLLaN
11-03-2005, 09:37 PM
SAM = Security Accounts Manager.. Its the area where all the user account type information is kept.

PHOENIX_12
11-03-2005, 10:40 PM
not getting any ideas here just asking basicly i could copy that one file to my computer from another computer and it would have the same accounts?

Icefire
11-03-2005, 10:52 PM
AFAIK......

No, plus you cant access the SAM file through windows.

Live linux CD's on the other hand.... :ph34r:

Watto
12-03-2005, 06:31 AM
No I can't copy it from another computer even if it did have the same accounts.

When you create a user account it creates a SID (Security Identifier) which it stores along with your password and group membership in the SAM file.

Now a SID is randomly generated when a user is created so there is no way i can create a SAM file with the same SIDs in it that the old one did.

Watto
13-03-2005, 08:21 AM
Thanks for your help guys.

I was able to get a copy a "Winternals Adminitrator Pack" and create a bootable cd which i used to perform a system restore which restore the SAM file.

Thanks

ViLLaN
13-03-2005, 09:32 AM
I use that constantly at work, brilliant product ;) Thats where I knew locksmith from :P heh

Glad its working for you ;P

AlCaTrAzz
14-03-2005, 11:19 AM
w00t.. good to hear it's working... and my first guess was 1337

KaneH
14-03-2005, 01:13 PM
linux boot disk =D
god im leet