Results 1 to 10 of 10

Thread: Recovering data from Windows account

  1. #1
    Dark side super agent
    Join Date
    Dec 2003
    Location
    Nirvana
    Posts
    1,895
    Thanks
    72
    Thanked
    99 times in 89 posts

    Recovering data from Windows account

    One of my Windows Vista PCs has thrown up an odd error. I'm not able to login to the only admin account as the password is not accepted and an error is thrown up saying that it can't connect to the service server. I've no idea about the hows or wherewhats of this but a long Google search isn't giving me any help. Of course there are a few unbacked up files in there that I need to save...

    Briefly I'm looking to do one of two things -

    1. Create a new admin account in order to take ownership of the old admin account and the files within it. Is this possible to do given that the two other accounts on the PC are user accounts?

    2. If the above fails (or isn't possible) I was looking into using a live Linux setup to access the Windows disk and retrieve the files that way. I'm sure I read somewhere that this is possible but can anyone confirm before I go ahead and potentially waste my time?

    TIA
    An Atlantean Triumvirate, Ghosts of the Past, The Centre Cannot Hold
    The Pillars of Britain, Foundations of the Reich, Cracks in the Pillars.

    My books are available here for Amazon Kindle. Feedback always welcome!

  2. #2
    Senior Member
    Join Date
    Aug 2005
    Location
    scotland
    Posts
    639
    Thanks
    5
    Thanked
    37 times in 34 posts

    Re: Recovering data from Windows account

    Try this to remove the password:

    http://pogostick.net/~pnh/ntpasswd/

  3. Received thanks from:

    Bluecube (25-10-2010)

  4. #3
    <<== UT3 Player spoon_'s Avatar
    Join Date
    Nov 2008
    Location
    London
    Posts
    2,071
    Thanks
    113
    Thanked
    139 times in 131 posts

    Re: Recovering data from Windows account

    1. No not really, it would be a huge security hole.
    2. Could do however you might be better off with Bart/Win PE.

    Can't you just repair the existing installation?

    Failing that you could always brute force the hash...

  5. Received thanks from:

    Bluecube (25-10-2010)

  6. #4
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Recovering data from Windows account

    There are drivers available wihin most libnux disros for reading NTFS file systems. If they aren't available by default, the mainstream distros have them available in a repositry. NTFS=3G is the main driver.

    If the files are on a separate partition you could re-install Vista (or upgrade to Win 7) and then as the admin on the new system, take ownership of the files and get them back that way.

    Personally I'd be looking at the Linux root first to ensure the data is safe, before trying the second. If the data is on the same partition as the main OS files, then method one is the best (and possibly only) way to go.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  7. Received thanks from:

    Bluecube (25-10-2010)

  8. #5
    Senior Member
    Join Date
    Feb 2008
    Posts
    925
    Thanks
    4
    Thanked
    161 times in 148 posts
    • smargh's system
      • Motherboard:
      • Gigabyte GA-EP45-UD3P
      • CPU:
      • Xeon E5450 with 775-to-771 Mod
      • Memory:
      • 16GB Crucial
      • Storage:
      • Intel X25-M G2 80GB/Adaptec 3405 4x 2TB Ultrastar RAID1 / 1x 6TB Hitachi He6 / Dying 2TB Samsung
      • Graphics card(s):
      • GTX 750 Ti
      • PSU:
      • Seasonic X-560
      • Case:
      • Lian-Li PC-A71
      • Operating System:
      • Windows 7 Ultimate 64bit
      • Monitor(s):
      • BenQ G2400WD
      • Internet:
      • Really Crap ADSL2 <3Mbit

    Re: Recovering data from Windows account

    Reboot in to safe mode - the "Administrator" account, which appears as disabled during normal use, should be available to log on to without a password when in safe mode.

    Or, at least, that's what I think I recall when I last looked at a Vista laptop.

  9. #6
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    11,478
    Thanks
    1,541
    Thanked
    1,029 times in 872 posts

    Re: Recovering data from Windows account

    I'd do as peterb said and get your data safe first, if you nuke your PC by mistake then at least you've lost nothing of importance. Linux ignores NTFS permissions by default (which is useful most of the time) so you won't have to mess about trying to crack the password or whatever first. The UBCD has a tool called something along the lines of 'NT Password and Registry Editor' which should be able to edit passwords quickly, provided you're not using NTFS disk encryption that is in which case you'd probably have to bruteforce to gain access which might take a wee while...

  10. #7
    Goron goron Kumagoro's Avatar
    Join Date
    Mar 2004
    Posts
    3,154
    Thanks
    38
    Thanked
    172 times in 140 posts

    Re: Recovering data from Windows account

    I have come across this a couple of times before and did manage to sort both of them
    but i cant remember how it wasn't that straight forward.

    Even when fixed the samething happened again a month or so later.

    I think that if there is still a password on the admin account you can sometimes create a new
    one or turn on the proper Admin account from a standard user account.

    Below worked for me one time and doing something like the above another

    http://www.vistax64.com/tutorials/13...ot-loaded.html
    http://blog.tiensivu.com/aaron/archi...-contents.html

  11. #8
    Member
    Join Date
    Nov 2003
    Location
    Salisbury
    Posts
    170
    Thanks
    2
    Thanked
    6 times in 6 posts
    • hibby's system
      • Motherboard:
      • Supermicro C7Z87-OCE
      • CPU:
      • Intel Core i7-4770
      • Memory:
      • 2x8GB Corsair DDR3 Vengeance LP 1600MHz (9-9-9-24)
      • Storage:
      • 256GB Samsung 840 Pro; 120GB OCZ Vertex 3; 1TB Samsung SpinPoint F1 HD103UJ; 250GB Seagate 7200.10
      • Graphics card(s):
      • Sapphire HD 7970 Vapor-X GHz
      • PSU:
      • 620W Corsair HX620
      • Case:
      • Antec P182
      • Operating System:
      • Windows 7 Ultimate 64bit
      • Monitor(s):
      • 24" Dell U2413; 24" Dell 2408WFP; 17" Dell 1704FPT
      • Internet:
      • Slow, rural broadband

    Re: Recovering data from Windows account

    Boot up from your Vista CD and run this from the command prompt in the recovery tools:
    Code:
    robocopy <path to copy> <path to destination> /S /B /COPY:DATOU
    You might need to hunt for the right path as I just tried it out and my C: drive had moved to D: in the recovery environment. If it complains about not being able to find folders use Ctrl + C to stop it, add /XJ to the command and run it again (should work).

    That should copy everything and put it all in the destination folder with everything intact apart from the file permissions, allowing access from any account.
    If you can't keep up, stick with reality...

  12. #9
    <<== UT3 Player spoon_'s Avatar
    Join Date
    Nov 2008
    Location
    London
    Posts
    2,071
    Thanks
    113
    Thanked
    139 times in 131 posts

    Re: Recovering data from Windows account

    Might as well do DAT, unless owner/auditing info is needed which I don't expect to be the case.

  13. #10
    Registered+
    Join Date
    Oct 2010
    Posts
    32
    Thanks
    0
    Thanked
    1 time in 1 post
    • Joe of Loath's system
      • Motherboard:
      • MSI 870-C45
      • CPU:
      • AMD Phenom B50
      • Memory:
      • 4gb 1333mhz Corsair DDR3
      • Storage:
      • 1TB + 500GB SATA drives
      • Graphics card(s):
      • nVidia GTX460
      • Case:
      • Coolermaster Elite 310
      • Operating System:
      • Ubuntu 10.04 + Windows 7 x86_64
      • Monitor(s):
      • 19" HP monitor

    Re: Recovering data from Windows account

    Build a Linux USB stick and boot into that, and use it to copy the data to an external hard drive.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 123
    Last Post: 19-11-2015, 10:22 PM
  2. Replies: 22
    Last Post: 03-09-2008, 04:45 PM
  3. Privacy concern - Scan orders being reported to 3rd parties.
    By Paranoid2000 in forum SCAN.care@HEXUS
    Replies: 35
    Last Post: 09-06-2006, 07:35 PM
  4. Windows - how to use it more securely
    By Paul Adams in forum Software
    Replies: 12
    Last Post: 07-02-2006, 04:18 PM
  5. How do I restore "Show Desktop" icon in the Quick Launch bar of Windows?
    By davidstone28 in forum Help! Quick Relief From Tech Headaches
    Replies: 7
    Last Post: 09-01-2006, 01:02 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •