Linux下去除windows密碼

今天遇到一件囧事，長時間不進Windows環境結果把自己設置的密碼給忘記了，於是便發了一條微博。熱心朋友一大堆，給我推薦各種各樣的方法，自己也到網上搜了一搜，原來在Linux下去除Windows的密碼是那麼簡單。方法步驟如下：

一、安裝工具chntpw

這個工具應該在各大發行版的官源里都存在（Linux對Windows的安全環境考慮真是沒得說。==！）。直接用你的發行版里最常用的安裝方式安裝即可。

比如Archlinux– sudo pacman -S chntpw

二、使用工具

掛載windows系統分區盤，進入到 windows/system32/config中，就地打開終端，運行如下命令：

sudo chntpw SAM

會得到如下提示：

chntpw version 0.99.6 110511 , (c) Petter N Hagen
Hive name (from header):
ROOT KEY at offset: 0×001020 * Subkey indexing type is: 666c
File size 262144 [40000] bytes, containing 5 pages (+ 1 headerpage)
Used for data: 233/17736 blocks/bytes, unused: 16/2584 blocks/bytes.

• SAM policy limits:
  Failed logins before lockout is: 0
  Minimum password length : 0
  Password history count : 0
  | RID -|———- Username ————| Admin? |- Lock? –|
  | 01f4 | Administrator | ADMIN | BLANK |
  | 01f5 | Guest | | dis/lock |

———————> SYSKEY CHECK <———————–
SYSTEM SecureBoot : -1 -> Not Set (not installed, good!)
SAM AccountF : 0 -> off
SECURITY PolSecretEncryptionKey: -1 -> Not Set (OK if this is NT4)
Syskey not installed!

RID : 0500 [01f4]
Username: Administrator
fullname:
comment : � ��:(�)��n 7
homedir :

User is member of 1 groups:
00000220 = Administrators (which has 1 members)

Account bits: 0×0210 =
[ ] Disabled | [ ] Homedir req. | [ ] Passwd not req. |
[ ] Temp. duplicate | [X] Normal account | [ ] NMS account |
[ ] Domain trust ac | [ ] Wks trust act. | [ ] Srv trust act |
[X] Pwd don』t expir | [ ] Auto lockout | [ ] (unknown 0×08) |
[ ] (unknown 0×10) | [ ] (unknown 0×20) | [ ] (unknown 0×40) |

Failed login count: 0, while max tries is: 0
Total login count: 81
No NT MD4 hash found. This user probably has a BLANK password!
No LANMAN hash found either. Sorry, cannot change. Try login with no password!

• – - – User Edit Menu:
  1 – Clear (blank) user password
  2 – Edit (set new) user password (careful with this on XP or Vista)
  3 – Promote user (make user an administrator)
  (4 – Unlock and enable user account) [seems unlocked already]
  q – Quit editing user, back to user select
  Select: [q] >

很顯然，選1清除密碼;選2重設密碼;選3不知不覺提升用戶許可權，哈哈;選4啟用或者關閉某個用戶。我果然選1，重啟進入Windows一路無阻！

來自Cloudpen

本文轉載來自 Linux 中國: https://github.com/Linux-CN/archive