Anyone know of any?

Nothing dodgy!

Some servers have been moved when one of our offices closed. The old mail server needs to be up to check if customers have mailed the old email address by mistake. We used to log the machine on with the domain admin - though now we've moved, that domain does not exist, so we can't log on.

The two people who knew the password have left - so no-one is about who knows the password.

I've tried a couple of utilities via google, but they either don't work, or are dead links.

Don't want a cracker as such - but a bootable floppy / cd which will allow us to change the local admin password.

Are there any recommended ones that would do the trick?

 

What OS?

 

Sorry - it is NT Server 4.0 SP6.

I've already tried "John the Ripper" - though that didn't work.

 

got a few..

Think I also sent them to nimbus..

Guessing windows platform

 

Yea, I have the Win2K one. Nothing for NT4 though..

 

http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

 

Even though its not on the domain you shoudl be able to logon using the cahced account info surely? You'll just get an eror saying the domain controller could not be found.

 

I always use the ntpasswd boot floppy linked above

 

Get a copy off the net of Knoppix or Commander, both are Linux boots and can crack the hashed encrpt password files, read about it first as you need to make sure which LUN your OS boots from, Raid card drivers (if it's not already supported) and doubley make sure if its dual boot which sam file your going to crack.....Yes I work within the Computer Information Security industry - nice label for a pen tester anyway. Any problems PM me, I can either place some bits on an ftp server or give you a little assistance.

 

lophtcrack

http://www.evadenet.com/downloads/lophtcrack.shtml

 

Allways use the above too

 

lopht crack will brute force it.. only by sniffining passoword hashes.. you need to get a copy of the san either from an erd or from the systemroot folder.. neither or which I assume are possible..

Knoppix
BartPE
ERD Commander
Locksmith
NT password boot disk

all the above are in my cd collection

 

CIA Commander is good I have used it on many occasions on both floppy disk and CD ROM I can mail you a copy if you want.

 

Well if you neeed the specific password for local admin (I take it you tried loging on with the domain account and the whole "cannot find domain controller" thing didnt work?) use ERD commander, use it all the time at work to fix pcs that are bluescreening