There are more and more users using Windows 7 (hereafter referred to as Win7), but there are always people who forget the login password for various reasons. Because Win7 uses a more strict security mechanism, the solutions that were previously available under Windows XP are no longer available under Win7. Let's take a look at how to retrieve or reset the login password under Win7.
Still can enter the system
Forgot the account password does not necessarily enter the system, such as setting up automatic login, or just forget one of the account passwords. In this case, we can use the software or system components to reset the password.
Case 1: User has set up automatic login
■Applicable user: Automatic account login has been set up
■Tool: LSASecresView
For an account that has been set to automatic login, the password is stored in encrypted mode. In the table. The password in the registry can be viewed by using "LSASecretsView", download "LSASecretsView" and extract it to any location. Then right-click on the program and select "Run as administrator", in its window, the value displayed by "DefaultPassword" is the password for the current auto-login account (not including the "." separator). Once you know the password, we can expand the "Control Panel→ User Account and Family Security & Rarr; User Account" to reset the current account.
Case 2: Multiple administrator accounts in the system
■Applicable users: There are other administrator accounts that can log in to the system
■Tools: Local users and groups
There are other management for this The account can be logged into the system. We can also use another administrator account to perform password reset operations on other accounts.
After entering the system as an administrator account, click the start icon, type "lusrmgr.msc" in the search box, then click "lusrmgr.msc"Start"Local Users and Groups" in the search results After the component, expand "local users and groups (local) →user", then select the account whose password needs to be changed in the right pane, right-click and select "set password", and then reset the password as prompted can.
Note:
Resetting passwords will prevent users from accessing encrypted files, including:
1. Email encrypted by user's public key
2. Internet password stored on computer or recorded by computer
3. Files encrypted by users using EFS
If you have the above encryption information, please make sure that you have done the relevant backup work (such as exporting encryption certificate, etc.). If the private key operation has not been performed, you can copy all EFS encrypted files to the FAT32 format partition before resetting the password, which can cancel EFS encryption.
Further reading Password reset disk
Since forcing a password reset will result in the inability to access encrypted files, it is necessary to create a dedicated password reset disk. Expand "Control Panel → User Accounts and Family Security & Rarr; User Accounts", then click "Create Password Reset Disk" in the left pane, and insert a USB drive as prompted to create a password reset disk. If you forget your password in the future, just click "forgot password" in the user login window, and then insert the password reset disk to reset the password. Such a password reset does not affect the user's access to the EFS encrypted file.
Unable to enter the system
If there is no automatic login and no other accounts that can be logged in, you can only use other systems to help.
Method 1: Replace the file to change the password
■Applicable users: Install dual system or other devices with WinPE system (CD or USB flash drive), and the original password is not important
■Tools: Other systems +Command Prompt
In the Win7 login interface, we can start "Easy Access" components, so you can use "cmd.exe" (Command Prompt) instead of "Easy Access" (For example, the on-screen keyboard osk.exe) can activate the command prompt before logging in to the system, so use the system's own "net user" command to reset the password.
First start WinPE system or another system in dual system, here is assumed to be WinXP system, open the "Windows\\system32" folder of the partition where Win7 system is located, right click "osk.exe"Select "Attribute ", click the "Security" tab in the window that opens, then click "Advanced" to set the file owner to the current WinXP login account. Return to the property settings window, set the full control of the current account pair "osk.exe" to "allow". then open "D:\\Windows\\System32", the original "osk.exe" Name it "osk1.exe", copy "cmd.exe" and change to the name "osk.exe".
Now reboot into the Win7 login interface, click "Easy Access" in the lower left corner of the screen. icon. Finally, in the pop-up "Easy Access Center" window, check "Start Screen Keyboard", click "OK", and the command prompt is started. In the command prompt window that opens, press "net user cpcw 123456" (assuming the password for the forgotten password is cpcw), so you can reset the password of the cpcw account to "123456". After resetting the password, you You can log in to the system using the cpcw account (password "123456"). Finally, don't forget to restore the replaced file!
Method 2: Clear the account password
■Applicable users: Same method 1
■Tools: Active@ Password Changer
In addition to the method of replacing the file Password, you can also use "Active@ Password Changer" to clear the account password.
Here is an example of WinPE booting a USB flash drive. Copy "Active@ Password Changer" to your USB drive. After starting WinPE, run "Active@ Password Changer", follow the prompts of the wizard and click "Next", the program will automatically scan all the accounts listed.
Then select the account that needs to reset the password in the account list, click "Next", then in the window that opens, check "Clear this User Password" (clear the account password), and finally click " ;SAVE" (save), so the selected account password will be cleared. After rebooting, you can log in to the system without a password.
Method 3: Use brute force to retrieve password
■Applicable users: want to retrieve the original password
■Tool: LC5
Forcibly change or clear the original account password, it may cause some untestable s consequence. In fact, the Win7 account password is encrypted and stored in the "C:\\windows\\system32\\config\\SAM" file. We can also use the software "LC5" to brute force the file to find out the password.
First start WinPE system, then copy the original system "SAM" file to the U disk, then on other computers, start "LC5", click "session → import ", open The window selection is imported from the file, select "from SAM file", click "Browse" to select the SAM file on the USB disk.
Then return to the program interface, click "session → session options ", check all the crack settings, click " OK " return to the program interface. At this point, the program will automatically list all the accounts in the SAM file, click "session → start cracking ", LC5 will start brute force password (depending on the password strength, it may take a long time, you can click "File & Rarr; Save ", save the session, continue to crack the next import session). After the crack is successful, use the cracked password to log in to the system and perform the reset operation.
Extend reading more programs can be replaced
Easy access center can also start magnifying glass (magnify.exe), narrator (narrator.exe), login interface can also activate sticky keys (sethc.exe) and other programs ( Both are in the Windows\\system32 folder), so we can also use "cmd.exe" to replace any of the above programs. If you are replacing the sticky key, simply press Shift five times on the login screen to activate the command prompt. The rest of the operations are the same as above.