Resetting Windows XP password with Knoppix 5.0

[askme]

Knoppix 5 has been recently release with support for NTFS read and write feature.
On one of my Windows XP computer I have forget the Administrator password, I booted it with Knoppix 5 and set the C drive in read/write mode. After that I deleted the SAM file of Windows/system32, which contain the Windows XP password(as far as I know). But now I am facing new problem. When I start my Windows XP following error appears

Isass.exe-System Error
Security Accounts Manager initialization failed because of the following error: A device attached to the system is not functioning. Error Status: 0xc0000001. Please click OK to shutdown this systen and reboot into Safe Mode, check the event log for more detailed infomation.
I even coppied SAM file from other computer to this computer and also booted in Safe Mode, but still same error, sam message.

Please advice me how to solve the problem. THANKS

[ckamin]

If it is ISASS, it's not a valid Widows process. If it is a typo and is LSASS, then it's probably legit if properly located. The error message you describe could be due to an error in the process that authentictes user logins. I would try to replace the original SAM file and see what happens. If you just deleted it, you might have an issue.

I would also recommend that you do not use Linux to write to an NTFS partition. The process is risky and I personally would not use it if I wanted to keep the dtata on the partition. I know it is claimed that 5.0.1 can write to NTFS, but that does not mean it is flawless and miught not corrupt your information.

There are many tools you can use to write/replace the SAM files. One good tool for accessing and writing to an NTFS partition is BartPE. You might look here: http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html Someone recently pointed me there, but I have not used it and cannot therefore recommend it.

I would also search around on the Micro$oft site to see if there might be some good advice on this. They have tons of info if you would care to look for it.

[askme]

I partially solve the problem, I coppied SAM file from Windows/repair folder to Windows/system32/config, but the problem is that it is asking original Admin password at time of windows XP was installed. I end with same place, I started all these because I had no Admin password, and computer asking me again. Any advice from any one.
I heard about Winternals Administrative Pak, can any one tell me more about it, ofcourse it is not free. Any similar software, which is free.
Thanks

[rwag66]

http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html works. I've used it numerous times on W2K and WXP, most recently WXP Home. The only time it blew up was when I used an older version on SP1 on a lab rat. Keep your floppy disk up to date, you SHOULD have no trouble. Be sure you know exactly where the \config is or you will have to search it out if it's not in the default position.

[ckamin]

rwag66:

Did you see the link I suggested in my previos post?

[rwag66]

Ckamin:

sure did, I've been using this since the early W2K days and look him up by google searching p. nordahl. I'ts been a year or so since I updated it. Since my last post, I've been experimenting with Knoppix 5.0.1 and 2 NTFS drives, some stuff won't write, not sure why. Read some more, found TRK 3.1, trinityhome.org, and the latest Captive-NTFS. Tried that on SuSE 9.3, wrong kernel, so just finished the SuSE 10.1 install, will try again with 2.6.16- something. Messing with an NTFS part is dicey, and I tend to be a little cavilier about things like that, so perhaps I've been lucky.