Unknown Admin Password in Recovery Console

Discussion in 'Security Software' started by MoiMeme, Dec 8, 2005.

  1. MoiMeme

    MoiMeme Guest

    Same impression here : I do not understand either what to recover when
    "everything" has been cleared.
    Having never attempted this : woul the CD allow to boot into the "recovery
    console" when no system is detected on the hard drives ?

    Phil
     
    MoiMeme, Dec 8, 2005
    #1
    1. Advertisements

  2. MoiMeme

    SueInCincy Guest

    I have FIVE computers that have security problems that otherwise
    well-respected computer consultants in my area have told me are in my
    imagination.

    The proof of it, I believe, is that even after we have complely cleared the
    hard drives (using a variety of methods) there is a request for an
    administrative password when using the recovery console. We tried using a
    blank, and that doesn't do it.

    Anyone have a suggestion about why this is happening, and more to the point,
    what we can do about it?

    Thanks so much.

    Sue In Cincinnati
     
    SueInCincy, Dec 9, 2005
    #2
    1. Advertisements

  3. MoiMeme

    Malke Guest

    There is always a request for password when using the Recovery Console.
    It wants the password that was set up for the Administrator account
    when you installed. Depending on whether you have OEM machines or not,
    there was a bug where the correct password was not accepted in the
    Recovery Console. Here is information about that:

    Fix For Correct Password Not Accepted Bug.

    1. Install Recovery Console.

    To do so, open a command box in Win XP:

    (select Start | Run, then type cmd); then, at the command prompt,

    type D:\i386\winnt32.exe/cmdcons (replace D: with the letter for your CD
    drive).

    The installation will proceed, after which you can choose the Recovery
    Console from the Windows boot screen.

    (The Bug)

    There is a bug in WinXP that prevents you from using Recovery Console
    even though the right password is typed when prompted.

    2. Enable Administrator to Log On Automatically in Recovery Console

    3. Reboot into WinXP.

    4. Select Start | Run, then type regedit Go to:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
    NT\CurrentVersion\Setup\RecoveryConsole Change the SecurityLevel DWORD
    value data to 1.

    5. Reboot the PC.

    Using the Recovery Console - http://www.wown.com/j_helmig/wxprcons.htm

    Based on posts you've made in these groups in the past and the active
    posts you have going now, you probably should take the advice of one of
    those computer consultants and have them set things up for you instead
    of doing it yourself.

    Malke
     
    Malke, Dec 9, 2005
    #3
  4. MoiMeme

    Paul Adare Guest

    microsoft.public.security news group, =?Utf-8?B?U3VlSW5DaW5jeQ==?=
    I'm confused here. If you've "completely cleared" the hard drives then
    what is the recovery console supposed to operating on? No OS on a
    completely cleared hard drive, what's the point of attempting to use the
    recovery console.
    --
    Paul Adare
    MVP - Windows - Virtual Machine
    http://www.identit.ca/blogs/paul/
    "The English language, complete with irony, satire, and sarcasm, has
    survived for centuries without smileys. Only the new crop of modern
    computer geeks finds it impossible to detect a joke that is not clearly
    labeled as such."
    Ray Shea
     
    Paul Adare, Dec 9, 2005
    #4
  5. MoiMeme

    SueInCincy Guest

    Thanks for your quick reply. I appreciate the time you took to answer this.

    When I typed in the D:\i386\winnt32.exe/cmdcons, and double-checked it, I
    got an error saying that incorrect directory.

    I just realized that I actually have a tablet PC that is running a different
    version of XP, one that I don't think I have a disk for. That may be part of
    the problem...

    I appreciate your help.
     
    SueInCincy, Dec 9, 2005
    #5
  6. MoiMeme

    SueInCincy Guest

    Hi, I appreciate the comment below, but right now I am waiting for one of
    them to get back to me, and trying to do what I can to get at least one
    secure computer...

    Based on posts you've made in these groups in the past and the active
    posts you have going now, you probably should take the advice of one of
    those computer consultants and have them set things up for you instead
    of doing it yourself.
     
    SueInCincy, Dec 9, 2005
    #6
  7. MoiMeme

    SueInCincy Guest

    Sorry, I guess I thought t sort of went without saying that after wiping the
    hard drive, I reinstalled the manufacturers' recovery media. One time, I
    tried just installing a new XP disk, but I had the same result.

    What I am most troubled by in all this is the appearance of an unknown
    person being the actual "administrator," somehow, of this computer.

    I do appreciate the time, energy and talents of all who respond.

    Cheers, Sue
     
    SueInCincy, Dec 10, 2005
    #7
  8. <snipped>

    Hi Sue - Not saying this is the fix, but if you are using the
    restore/recovery tools from the manufacturer you may be suffering from a
    ghosted SID, try the link below, it will offer you information for you to
    decide if you need the tool provided at the bottom of the page.

    http://www.sysinternals.com/Utilities/NewSid.html

    HTH

    TpwUK
     
    Martin Spencer-Ford, Dec 10, 2005
    #8
  9. Pardon me if I ask a stupid question, but are you aware that all mainstream
    OS have a built-in user account (usually called root or Administrator), used
    for operations that require full control of the OS? If you find such an
    account on your computer, this is completely normal.
     
    Lionel Fourquaux, Dec 10, 2005
    #9
  10. MoiMeme

    Paul Adare Guest

    microsoft.public.security news group, Martin Spencer-Ford
    Whether or not the system was imaged from another resulting in a
    duplicate SID will have no impact at all on the Recovery Console.

    --
    Paul Adare
    MVP - Windows - Virtual Machine
    http://www.identit.ca/blogs/paul/
    "The English language, complete with irony, satire, and sarcasm, has
    survived for centuries without smileys. Only the new crop of modern
    computer geeks finds it impossible to detect a joke that is not clearly
    labeled as such."
    Ray Shea
     
    Paul Adare, Dec 10, 2005
    #10
  11. MoiMeme

    SueInCincy Guest

    I truly appreciate the time you take to respond.
    I do understand that there is an administrator account, and I can access it
    in safe mode only. That has a password that I assigned. What I am talking
    about is that when I try to use the Recovery Console, it asks for a password,
    and neither blank nor the password I assigned to my "administrator" account
    works.

    Likewise, I found many files on my system (right after the disk was cleared
    and restored, *before* it was reconnected to the internet) that were password
    protected, or "available only to the system administrator," even though I was
    logged on as "Administrator."

    I really do appreciate the time you take on this.
     
    SueInCincy, Dec 10, 2005
    #11
  12. MoiMeme

    Paul Adare Guest

    microsoft.public.security news group, =?Utf-8?B?U3VlSW5DaW5jeQ==?=
    http://support.microsoft.com/default.aspx?scid=kb;en-us;308402

    --
    Paul Adare
    MVP - Windows - Virtual Machine
    http://www.identit.ca/blogs/paul/
    "The English language, complete with irony, satire, and sarcasm, has
    survived for centuries without smileys. Only the new crop of modern
    computer geeks finds it impossible to detect a joke that is not clearly
    labeled as such."
    Ray Shea
     
    Paul Adare, Dec 10, 2005
    #12
  13. MoiMeme

    Paul Adare Guest

    microsoft.public.security news group, =?Utf-8?B?U3VlSW5DaW5jeQ==?=
    Like what files exactly and what error messages did you receive,
    exactly, when attempting to access these files? What version, exactly of
    Windows XP are you talking about? Was this a reinstall with the OEM
    disks or a retail CD?

    No offense, but from your postings thus far about the "problems" you've
    been having, it appears to me that you don't have enough knowledge to
    determine whether or not what you're experiencing are in fact real
    problems. As far as your "respected" local consultant goes, if he or she
    thought the same as you with regards to pagefile.sys, hiberfil.sys and
    ntdetect.com, he or she should not have the respect they apparently
    have.

    It is becoming very difficult to help you here as you are simply not
    being specific enough for anyone to begin to help you and it appears
    that you're letting your lack of knowledge about the OS lead you to
    assumptions about what you're seeing that are more than likely incorrect
    and are affecting what you post about.

    --
    Paul Adare
    MVP - Windows - Virtual Machine
    http://www.identit.ca/blogs/paul/
    "The English language, complete with irony, satire, and sarcasm, has
    survived for centuries without smileys. Only the new crop of modern
    computer geeks finds it impossible to detect a joke that is not clearly
    labeled as such."
    Ray Shea
     
    Paul Adare, Dec 10, 2005
    #13
  14. MoiMeme

    nella Guest

    but malke what if you cannot enter neither your windows or the safe mode ???

    Is their a possibility to install it without entering the windows ??
     
    nella, Apr 24, 2007
    #14
  15. MoiMeme

    Malke Guest

    You're responding to what, IIRC, is a very old post. Please describe the
    problems you are having, including what version of XP you have and what
    you've already done. Here is a link that will help you with what details
    to include:

    http://www.dts-l.org/goodpost.htm

    Knowing the details of your specific situation will help me - and others
    - give you focused troubleshooting.

    Malke
     
    Malke, Apr 24, 2007
    #15
  16. MoiMeme

    nella Guest

    thanks malke

     
    nella, May 17, 2007
    #16
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.