It happens all the time. Clients come to us after deleting or demoting users, only to find that they no longer have Administrator access or no access at all. No worries, there are a couple things that can be done to would allow Administrator access, and this is how we do it:

Check this first: When most systems are setup, Windows XP will create an Administrator user. Most people, and companies, leave the password blank. Try logging into Windows using the Administrator user and no password. This works nine out of ten times.

 Ubuntu Live: This used to be the method of choice for managing lost Administrator passwords. However, the February 2013 Microsoft patch plugged this hole and rendered it useless.

New Method of Choice – Windows XP Installation CD: During a System Repair, the Windows XP CD uses the Administrator account. There is a hole or opportunity in the processes when System Repair begins to install drivers. At the moment that you see “Installing Drivers” at the lower left corner of the screen, immediately press Shift + F10 to enter the command console. Next type NUSRMGR.CPL, which brings up the “User Accounts” screen that normally allows you to Modify / Add / Delete users.

Do not change the Administrator password. Changing the Administrator password at this point may create system and encryption errors the may render some XP functionality useless!

Rather than changing the Administrator user account, let’s elevate an existing user with a known password (if possible) to Administrator status. The less you do, the greater opportunity for success. However, if you do not know the user password, simply blank the password rather than entering a new password.

Allow System Repair to complete normally. After a reboot, login using the Elevated User Account. Use Manage to change the Administrator password and to change the Elevated User Account. Reboot again, and you are finished.

The following is a step-by-step description of the initial Repair process that we found on the internet that worked for us:

1. Place your Windows XP CD in your cd-rom and start your computer (it´s assumed here that your XP CD is bootable - as it should be - and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd Typically, it will be "Press any key to boot from cd"

3. Once you get in, the first screen will indicate that Setup is inspecting your system and loading files.

4. When you get to the Welcome to Setup screen, press ENTER to Setup Windows now

5. The Licensing Agreement comes next - Press F8 to accept it.

6. The next screen is the Setup screen which gives you the option to do a Repair. It should read something like "If one of the following Windows XP installations is damaged, Setup can try to repair it" Use the up and down arrow keys to select your XP installation (if you only have one, it should already be selected) and press R to begin the Repair process.

7. Let the Repair run. Setup will now check your disks and then start copying files which can take several minutes.

8. Shortly after the Copying Files stage, you will be required to reboot. (this will happen automatically - you will see a progress bar stating "Your computer will reboot in 15 seconds"

9. During the reboot, do not make the mistake of "pressing any key" to boot from the CD again! Setup will resume automatically with the standard billboard screens and you will notice Installing Windows is highlighted.

10. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

11. At the prompt, type NUSRMGR.CPL and press Enter. Voila! You have just gained graphical access to your User Accounts in the Control Panel.

12. Now simply pick the account you need to change and remove or change your password as you prefer. If you want to log on without having to enter your new password, you can type control userpasswords2 at the prompt and choose to log on without being asked for password. After you´ve made your changes close the windows, exit the command box and continue on with the Repair (have your Product key handy).

13. Once the Repair is done, you will be able to log on with your new password (or without a password if you chose not to use one or if you chose not to be asked for a password). Your programs and personalized settings should remain intact.

This security hole allows access to more than just user accounts. You can also access the Registry and Policy Editor….

And in case you are wondering, NO, you cannot cancel install after making the changes and expect to logon with your new password.

Cancelling will just result in Setup resuming at bootup and your changes will be lost.