Password Conundrum in XP

[Alexander the Pretty Good]

Right. So I get a new (well used) laptop for use in school and it has an admin account with no password. I create a new admin account with my name, password protect it, and then make the old admin account a limited one. I log off the admin account so I can go into my new account. Except apparently I misspelled the password when I created the account because I can't figure it out. And I can't reset or delete it because the other admin account is now limited.

Is there anything I can do? I saw a few shady password reset/recovery things that I'll try out when I get a CD to burn, but is there anything better?

[Lemur]

There are lots of tools available for recovering a lost password. Unfortunately, they can also be used for illicit purposes. Here's Microsoft's official method. Never tried it, but it looks legit, and not too much of a pain.

-edit-

Oops, looks like Msoft's method requires that you do some forward planning. My bad. I'm going to PM you an alternate method.

-edit of the edit-

Here's yet another method ... this looks like a possible winner ...

1. Place your Windows XP CD in your cd-rom and start your computer (it’s assumed here that your XP CD is bootable – as it should be - and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd Typically, it will be “Press any key to boot from cd”

3. Once you get in, the first screen will indicate that Setup is inspecting your system and loading files.

4. When you get to the Welcome to Setup screen, press ENTER to Setup Windows now

5. The Licensing Agreement comes next - Press F8 to accept it.

6. The next screen is the Setup screen which gives you the option to do a Repair.

It should read something like “If one of the following Windows XP installations is damaged, Setup can try to repair it”

Use the up and down arrow keys to select your XP installation (if you only have one, it should already be selected) and press R to begin the Repair process.

7. Let the Repair run. Setup will now check your disks and then start copying files which can take several minutes.

8. Shortly after the Copying Files stage, you will be required to reboot. (this will happen automatically – you will see a progress bar stating “Your computer will reboot in 15 seconds”

9. During the reboot, do not make the mistake of “pressing any key” to boot from the CD again! Setup will resume automatically with the standard billboard screens and you will notice Installing Windows is highlighted.

10. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

11. At the prompt, type NUSRMGR.CPL and press Enter. Voila! You have just gained graphical access to your User Accounts in the Control Panel.

12. Now simply pick the account you need to change and remove or change your password as you prefer. If you want to log on without having to enter your new password, you can type control userpasswords2 at the prompt and choose to log on without being asked for password. After you’ve made your changes close the windows, exit the command box and continue on with the Repair (have your Product key handy).

13. Once the Repair is done, you will be able to log on with your new password (or without a password if you chose not to use one or if you chose not to be asked for a password). Your programs and personalized settings should remain intact.

[Xiahou]

They make Linux boot discs that can change 2000/XP passwords. It's been awhile, but I've successfully used one before.

[R'as al Ghul]

Interesting how safe WinXP is.
Why bother with passwords at all?

[Husar]

Why would anyone need a password in Windows anyway? I'd rather use a BIOS password but from what I know these can be cicumvented easily as well. Locking the PC physically is the safest I guess.

Spoiler Alert, click show to read: 

Now I'm waiting for whacker or someone else to tell me what an irresponsible, stupid and danger-loving computer user I am.

[Xiahou]

Why would anyone need a password in Windows anyway? I'd rather use a BIOS password but from what I know these can be cicumvented easily as well. Locking the PC physically is the safest I guess.

Spoiler Alert, click show to read: 

Now I'm waiting for whacker or someone else to tell me what an irresponsible, stupid and danger-loving computer user I am.

Passwords are a fundamental aspect of safe computing, but there isn't much someone can't do to your PC if they're given enough alone time together.

A password can help keep someone from coming in across 'a series of tubes' (also known as the Internet) but if they have physical, unsupervised access passwords can be circumvented- easily, in the case of Windows.

[CrossLOPER]

Passwords are a fundamental aspect of safe computing, but there isn't much someone can't do to your PC if they're given enough alone time together.

A password can help keep someone from coming in across 'a series of tubes' (also known as the Internet) but if they have physical, unsupervised access passwords can be circumvented- easily, in the case of Windows.

I can find a program capable of disabling your password in a pinch. If a person is truly dedicated to digging through your stuff, he/she will get it. Just pointing that out.

AtPG:

How did you misspell your password twice?????

[Xiahou]

I can find a program capable of disabling your password in a pinch. If a person is truly dedicated to digging through your stuff, he/she will get it. Just pointing that out.

That's my whole point.

[Whacker]

@ Husar - You are a horribly irresponsible computer user and should cease all pc related activities immediately. Thank you. (You'd also be better off setting an HDD password)

@ Crossloper - It's possible, I've done it more than once. You're working fast, your hands are off by a key, not paying too much attention. Just goes to prove that when doing critical admin work you need to sllooowwww ddoowwnnn and be careful.

Xiahou is certainly correct, password usage IS fundamental to security. It's also a fine line, too leineint and people will make up passwords like "12345" (luggage??), too harsh and people will write down passwords on post-it notes no matter what your policy is. Our corporate policy is change them every 90 days, and you can't re-use a password for 5 intervals, which hasn't been too bad for most of us. Truly worthwhile security schemes use at least 2 of the 3 mechanisms, something that:

1. You know (password)
2. You have (key fob)
3. You are (biometrics; fingerprint, eye scan)

[Alexander the Pretty Good]

How did you misspell your password twice?????

That's the part that bothers me the most.

[CrossLOPER]

Wait, Alexander, I was checking a faulty laptop's BIOS and I found a section which allows you shut off the password. Whether or not it allows you make a new one is beyond me at this time, but at least you might be able to access your PC. Also, it may not be a universal model.

[Whacker]

Crossloper, unfortunately for Alexander BIOS passwords have nothing to do with OS passwords. What you probably found was the option to turn off the various passwords that protect BIOS options, like boot, HDD password, user password, etc.