First:
A. Use the installation disk (with PE system) to enter the PE system (windows or linux can be)
Second. Modify C: windowssystem32 under magnify.exe becomes cmd.exe (copy cmd.exe, Modified to magnify.exe)
Three. In the login interface, click on the lower right corner, select the magnifying glass, confirm, you can start cmd.exe with the administrator's permission, so you can do any operation
four.net user Administrator "" to clear the password of the administrator
net user test test /add to add a test user net localgroup administrators test /add to add users to the administrators group
Solution:
Conditions: Genuine Win7 ordinary home version. I forgot the login password for the Administrator.
General Principle: Use the WinPE system to clear the password.
A. Find a pirated version of the windows xp installation disk, about 3 dollars, I bought the pirated version is more famous, deep technology.
B. Start the target computer, enter the BIOS, and set the disk to IDE mode. This prevents the PE system under test from detecting the disk and not seeing the disk information.
C. Put the installation disk into the computer, reboot, and enter the interface of the installation disk. Select the WinPE system. enter.
D. After entering, open “ my computer & rdquo;, do the second step, you should be able to enter the C drive. Go to the C:windowssystem32 folder. (My original win7 system is installed on the C drive)
E. Find magify.exe, change its owner to Administrator, and change the permissions to Administrator Full Control. These steps are done by right-clicking the '> attribute on magnify.exe. For the same reason, do step 5 for cmd.exe.
F. Change magnify.exe to magnify.exebackup, change cmd.exe to magnify.exe, restart the system, enter the login interface where you forgot your password, and see a button in the lower left corner of the screen, all of which are auxiliary. Function, select the screen magnifier. At this time, the cmd window pops up. Type the command: net user administrator /active:yes
G. Type the command: net user administrator "" The password of the administrator is actually cleared. At this time, the password has been cleared. Click the login button to log in to the system.
It must be noted that:
A. After logging in, remember to change the file you just changed back to the original, otherwise it will leave a back door.
B. If other users have forgotten the password. Simply replace the administrator in the two net commands with the corresponding username.
Principle: In the interface of win 7 boot, there are some auxiliary functions in the lower left corner. These accessibility features correspond to small programs. For example, the magnifying glass corresponds to Magnify.exe. There is also permission to use it without logging in. The entry point is here. We entered through the PE system and disguised cmd.exe as Magnify.exe. In this way, without accessing the system, the administrator obtains the permission to use cmd, and can directly execute the net command to clear the password.