Table of Contents

Bypass Windows Logons with the Utilman.exe Trick

From: https://www.technibble.com/bypass-windows-logons-utilman/ 

First of all, we will need a way to access the file system to swap out Utilman.exe with 
something else like cmd.exe. There are a few ways to achieve this:

Remove the operating system hard drive from the target system and slave it into another 
system with a working operating system. From there you can swap out the files on the 
slave drive
Use a Boot CD like UBCD4Win and use the file management software there
Use the Windows Vista or 7 DVD

C:\
cd windows\system32
ren utilman.exe utilman.exe.bak
copy cmd.exe utilman.exe


To reset an existing users password, we need type the text below. In this example, we will be changing JohnDoe’s password to “hunter2”.
net user JohnDoe hunter2

You should be able to log in with this new password straight away.

If you dont know what the username on the system actually is, you can see a list of the users by typing:
net user

Creating a New User Account
To create a new user account in the Command Prompt (Username: NewGuy. Password: abc123), and add them to the Administrators usergroup type:
net user NewGuy abc123 /add
net localgroup Administrators NewGuy /add

Bypass Windows Logons with the Utilman.exe Trick

From: https://www.technibble.com/bypass-windows-logons-utilman/ 

First of all, we will need a way to access the file system to swap out Utilman.exe with 
something else like cmd.exe. There are a few ways to achieve this:

Remove the operating system hard drive from the target system and slave it into another 
system with a working operating system. From there you can swap out the files on the 
slave drive
Use a Boot CD like UBCD4Win and use the file management software there
Use the Windows Vista or 7 DVD

Reset Password

The trick, as detailed by Jamal Naji, boils down to replacing the Ease of Access center application (utilman.exe) 

  with another copy of the command prompt (cmd.exe).

From: https://support.microsoft.com/en-us/help/555910/how-to-enable-the-built-in-administrator-account-in-windows-vista 

 At the command prompt, type net user administrator /active:yes, and then press Enter.

Type net user administrator <Password>, 

  
* Bodusoft
* Possibly slax

Using boot to linux

From: http://www.techrepublic.com/blog/tr-dojo/reset-windows-passwords-with-the-help-of-linux/

Sethc Hack: http://www.hackcave.net/2015/10/hack-windows-10-login-password-in-2.html 

So let's get started.

1)Insert the live CD/USB and boot from it. [You may need to Turn off Secure Boot feature for UEFI BIOS]

2)Locate the drive where Windows is installed.(C drive) Goto Windows/system32 folder.

3)Find out a file named 'cmd.exe' and rename it to 'cmd0.exe'

4)Next, find another file by the name 'sethc.exe' [It is the program for windows sticky keys] Rename sethc.exe to cmd.exe.

5)Finally, rename cmd0.exe to sethc.exe. [Swapping the sticky keys program with Command Prompt (cmd). So whenever Sticky Keys program is called it runs cmd and vice versa. ]

5)Great! Now Shutdown and boot into Windows.

6)Press shift key five or six times at the login screen.

7)Now the command prompt will open up. Type this without quotes and hit enter.
"net user"

Now you can see the list of active accounts [User Names] in the PC. Make a note of the Account Name you need to hack.

9) type the following command and hit enter.
"net user <space><Account Name><space> *"

Note  <space>: leave space

          <Account Name> Replace it with the account you need to hack. In this example 'Mathews'

8)It will display 'enter new password'. Enter any new password and confirm. To remove password leave it blank.

Ubuntu Live on USB: http://www.ubuntu.com/download/desktop/create-a-usb-stick-on-windows

Rufus: https://rufus.akeo.ie/