How to Change Windows User Password Using Backtrack 4

  1.  Boot Backtrack 4 in your computer.

  2. Backtrack Select Menu "Once Backtrack is done loading and the select menu is visible, pick "Start  Backtrack Frame Buffer       (1024X768)"
   
 3. Inserting Startx
  Once you're allowed to type in commands, type in "startx".
  
  4. Chntpw "Once the GUI is visible, go to start(Lower-left corner) Backtrack >> Privilege Escalation >> PasswordAttacks >> Chntpw, opening the Chntpw terminal."

  5. Now inside backtrack, you need to find the file path to a file called SAM, usually under 'Windows/System32/config/SAM'

  6.Now in the Chntpw terminal type in "chntpw -i " Ex: chntpw -i /media/disk/windows/system32/config/SAM

  7. Type in 1. "Edit user data and passwords"

  8. Type in the username of the Windows account you want to change the password in.

  9. Type in 1 to clear the password, type in 2 to edit it.

  10. Once done, type in the username of the Windows account you changed or cleared the password on.

  11. Type in 4. "To unlock account"

  12. Type in !, then q, then y.

  13. Done! Close Backtrack 4 and restart Windows!