windows 2000 password cracker

[krazykarl]

Does anyone know of a password recovery tool for windows 2000 that does not require anything other then user level access?

The reason I ask, is that I am trying to do some work on a remote machine, and the password I had listed does not seem to work, niether do various permiutations of said password. All of the utilities I have found require some kind of bootdisk, which as the system is not at my current location, i cannot use these options. I can get into the local user accnt fine, but cannot access the administrator account.

I realize this is basically hacking the computer, but seeing as I am the system administrator, I dont see a problem with this. Another useful option would be if anyone knows how to make a machine join to a domain without having local admin access.

[kshcshbash]

Install Cain and Abel
As long as you have admin permissions, you can dump LSA secrets and retrieve the passwords. If memory serves, it will need to be decrypted. LM or NTLM is the best place to start.


iirc, RedHat has the ability to join a Windows 2000 domain.