Just like in Windows XP, you can gain circumvent Windows' security measures with a hidden administrator account. Unlike Windows XP however, Microsoft has since fixed its rather blatant vulnerablility in safe mode, so that the administrator account can't be reached quite as easily any more. This is where the Windows Installation DVD comes into play (make sure that it isn't simply a Recovery DVD, as that won't suffice). With it, you can navigate to the administrator account without ever setting foot into Windows itself. Note that this method unfortunately requires modifying the registry and can thus be rather intimidating at first. If you follow our instructions carefully however, you should be on good terms with Windows again in no time.
1 .Start your PC with the bootable Installation DVD of Windows. If you have not already done so, make sure to adjust your boot priorities in the BIOS, so that your CD/DVD/Blu-Ray drive has priority over your hard drive.
2. In the first menu, select your installation language and click on “Next”. In the following window, click on “Repair your computer”.
3. The set-up assistant will now search for Windows installations and list them up. Choose the one that applies to you and proceed to the next window. Continue by clicking on “Command Prompt” continue to the more in-depth part.
4. Enter “regedit” into the prompt and hit enter. This will open the Registry Editor, which isn't yet connected to the registry of your installed version of Windows. To remedy that, select “HKEY_LOCAL_MACHINE” on the left, and navigate over “File” > “Load Hive”. Enter the line “%windir%\system32\config\sam“ into the field “File path“ and click on “Open” to load the user and password information manager of Windows (alternatively, you can also manually browser to your Windows folder and select the SAM file). The Registry Editor will then demand a name for the new hive, which can be anything you like. Just make sure to remember it for the following step.
5. Head to “HKEY_LOCAL_MACHINE > [Your new hive] > SAM > Domains > Account > Users > 000001F4”. Turn your attention to the right panel, where you will find an entry simply called “F”. This is where we will activate the administrator account for Windows. Double-click it to summon an hexadecimal editor with a bunch of neatly arranged numbers.
6. Look for the line that starts with “0038” on the left side. Directly next to it (to the right), you will find the value “11”. Double-click it and overwrite it with “10” to activate the administrator account. Be advised that it's important not to change anything else, as Windows might be rendered inoperable otherwise. Don't worry - if something does go awry, just click on “Cancel” and try again. Otherwise, click on “OK”.
7. Close the registry editor and the command prompt and reboot your PC without the Installation DVD. If everything has worked, you will now find a new administrator account to log in to in the welcoming screen.
From here on out, unlocking your own user account is a breeze. Log in to the admistrator account, summon your command prompt up again by clicking on the Windows-Symbol in the bottom right corner of the screen and search for “cmd”. Right-click the tool in the search results and select “Run as Administrator”. Enter the command
net user [your account name] [your new password]
to reconfigure your account's password. In practice, this might look like this "net user daver secret123". Just make sure to remember your new password and log out to finish the process.
Tip: It is advisable disable to administrator account again after it has fulfilled its purpose, as its unprotected, yet powerful nature can pose a serious security risk. To do so, log into your own account, open the command prompt with administrative rights again, and enter
net user administrator /active:no
Alternatively, you may hold on to it, but equip it with a password by entering
net user administrator [password]
In either case, restart you computer for the changes to take effect.
Source: pcadvisor - This article is based on a segment by their sister publication PCWelt.de.
