VerySimple Developer Blog
Technical Tips, Tricks and Rants.

Archive for May, 2007

 
May
24
Filed Under (Digital Life) by Jason on 24-05-2007

Microsoft has been the 800lb Gorilla in the software business for some time now.  Like them or not MS produces the most popular operating system and office productivity software in the world.  There are plenty of alternatives, but I’ve seen figures that 90-95% of all desktop PCs are running some version of Windows.

It might seem odd to think of MS as an underdog since they have such an overwhelming lead in the desktop market.  However, anybody in the IT business (especially if you visit sites like Digg and slashdot) know that Microsoft is villified in the IT community.  If you claim to run Windows or, God forbid actually *like* it, you can expect to be insulted in public forums.  The technical elite running *nix will blast you for running on an insecure platform.  The open source zealots will blast you for supporting proprietary software and vendor lock-in.  The creative types using Apple will blast you because Microsoft products are tacky looking.

I tend to ride the fence, supporting and bashing Microsoft as it pleases me (and/or annoys others).  But I have to admit that in technical forums, there is a general perception of Windows as being a newbie OS - for those that don’t know any better.  It sometimes feels like those who praise Microsoft’s occasional good deeds are in the minority.  It feels like, in some ways, Microsoft is the underdog.

If you believe everything you read on these tech forums, it would seem that Microsoft is all dried up and their old, proprietary system will be wiped from the face of the earth in a few years.  Perhaps this is the way it’s always been with the big company on the block?  Perhaps the times really are a’changing?

Am I just focusing on the vocal minority?  Feel free to leave comments with your thoughts.

 

 
May
22
Filed Under (Windows) by Jason on 22-05-2007

Recently an old application server arrived at the office. The server was running NT 4 and MS SQL server. We needed to get the machine running to do some reverse engineering of the code and database, however the administrator password had been lost. The original developer had moved out of state and didn’t have records, nor did the owner. It seemed that the only choice left was to hack into the machine.

I started with various failed attempts to recover the password using boot disks that grab info from the SAM database and crack the passwords. Since this was older hardware with an old drive array configuration, though, several of these recovery disks couldn’t recognize the drive. One program did see the drive and recover the SAM information but was unable to crack the password.

I do think that strategy would have eventually worked. But, I decided it would be easier to re-set the password instead of recovering it. There is an old trick with NT and 2000 machines if you have physical access the the machine where you replace login.scr with cmd.exe.

First you boot from an NTFS boot disk. The NTFS boot disk above gives you a windows DOS prompt with full read/write access to the drives on the server, though you are not technically authenticated as a user on the system.  C:\winnt\system32\login.scr is the screensaver executable that Windows runs automatically at the login prompt. You can use this hack to fool Windows into opening up a DOS shell with system priviledges. At the boot disk command prompt enter the following to backup and replace login.scr with cmd.exe:


copy c:\winnt\system32\login.scr login.bak
copy c:\winnt\system32\cmd.exe login.scr

Now that login.scr was replaced, remove the boot disk and re-boot to the NT login prompt. I waited until Windows launched login.scr (default is 15 minutes) and a DOS command window opened right on top of the login prompt. The following DOS command changes the Administrator password:


net user Administrator mynewpass

The password is now changed. Finally, I gave the old Microsoft 3-finger salute (ctrl+alt+del) and logged on using the username/password I just created. Woot!

WARNING: If this is a domain controller or using active directory, I have read that this trick is not advisable and may cause you some file permission headaches.

 

Close
  • Social Web

NOTE: Email is disabled

E-mail It