Recover password on a vm
⏲ Posted on Monday 21 July 2014
Recover password on a VM. Or any machine you have physical access to.
Oh I forgot my password. Not sure what happened really, copied the VM and now I cannot login.
Beware if you have EFS or encrypted files. You will probably have a bad time.
Create a WinPE ISO
Install the ADK, run Deployment tool as admin then run
copype amd64 C:\WinPE_amd64
MakeWinPEMedia /ISO C:\WinPE_amd64 C:\WinPE_amd64\WinPE_amd64.iso
Mount that ISO as a CD/DVD
Something something VM settings.
Force the VM to boot from CD
Edit the .vmx of your VM and add
bios.forceSetupOnce = "TRUE"
Now the fun. I found my VM drive, D:
Hijack a system utility
D:
cd D:\windows\system32
ren utilman.exe utilman.exe.old
copy cmd.exe utilman.exe
Reboot.
At the password prompt open the accessibilty tools, that little icon at the bottom.
whoami
I am system. That's handy.
Update password
net user Administrator Password123
And login.
Voila.