Obtained one used HDD - W10 Password Protected - Accessing?


  1. Posts : 5,048
    Windows 10/11 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
       #1

    Obtained one used HDD - W10 Password Protected - Accessing?


    Hi folks -

    The other day, I received a 3.5 WD 500GB SATA HDD for forensic examination.

    I connected the drive to a W10 System using a SATA to USB 3 adapter and was able to mount it.
    Then I tried to boot the W10 drive from directly from the USB adapter with success, until I reached the login screen requesting the password.

    In this scenario, with a raw drive and connected by USB 3.0 at that, what would be the best way to strip the password?

    Remember, I am booting off the USB attached raw drive.

    I have an idea, but best to get some opinions, first.

    Thanks!

    Last edited by Compumind; 21 Sep 2019 at 12:30.
      My Computer


  2. Posts : 8,107
    windows 10
       #2

    Normally 10 wont boot from usb. Second its against our rules to tell you how to bypass a password as its hacking. You say raw drive do you mean the parition is raw? If you simply connecet it to the pc as usb and boot from hd you should be able to see the drive but would need to have ownership to view files
      My Computer


  3. Posts : 5,048
    Windows 10/11 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
    Thread Starter
       #3

    Hacking, Samuria?

    No, I don't think so.

    Rather than take my client's entire system, I just used the HDD.
    Her ex-partner changed the password.

    I just need to reset to a generic string, make sure certain files are there where she specified and back into the machine, it goes.

    Yes, I have some tools, but doing this via USB is unique to me.

    If anyone would like to PM me in confidence, please do so.

    Otherwise, I will have proceed back on her PC.

    TIA
      My Computer


  4. Posts : 5,452
    Windows 11 Home
       #4

    If it is just a local account, you can simply change the password, eg using utilman method, there are tons of videos on youtube. Since it is just a secondary HDD, simply find and overwrite utilman.exe with CMD.exe and then you can run CMD with SYSTEM rights at logon and change or remove the password (*).
    Code:
    copy /y %WINDIR%\System32\cmd.exe %WINDIR%\System32\utilman.exe
    net user username password
    YouTube

    If it is an online account, you can enable built-in-admin and try to access files from there.
      My Computer


  5. Posts : 5,048
    Windows 10/11 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
    Thread Starter
       #5

    Thanks for the suggestion.

    I think that I'll be good now.

      My Computer


  6. Posts : 14,046
    Windows 11 Pro X64 22H2 22621.1848
       #6

    Sent you a PM for another idea, just in case.
      My Computers


  7. Posts : 5,048
    Windows 10/11 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
    Thread Starter
       #7

    I already resolved the issue, thanks!
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:36.
Find Us




Windows 10 Forums