Password Reset for Windows Server CORE

 Hi there, 

There are pretty much useful guides around to teach you how to do local admin password reset via the GUI based Windows OS.  It usually exploits the Accessibility button or 5x Shift key (Sticky key) to change them to be a shortcut to CMD,

But what about hardened Windows Server Core without any of these?

Well, the answer is pretty much similar.

Except that you need to take note what you need to change instead.

1. Start your server.

2. Go into its logon page.

3. Take note of the path highlighted below:

In this case, take note of "logonUI.exe"

4. Boot from Windows CD installer (depending on your own version)

5.From the Windows Setup menu, click “Next”.

6. Select “Repair your computer”

7. Under Choose and option, click on “Troubleshoot”.

8. Under Advanced options, click “Command Prompt”.

9. Type: "wmic logicaldisk get caption"

10. Identify the drive that holds your Windows Installation

(guide to check: it should contain program files, users and windows. Inside your User folder should consists of all the local users to the computer)

11. cd drive:\windows\system32

12. Rename the file that was being used when the server started. 

ren logonUI.exe logonUIold.exe

13. Then make a copy of CMD and rename it as logonui.exe

copy cmd.exe logonui.exe

14. Restart your server.

15. You Windows will now start without a prompt for password.

16. Now do your password reset via net user and remember to enable account

net user username password /active:yes

17. Restart your server

18. Boot from Windows CD installer (depending on your own version)

19.From the Windows Setup menu, click “Next”.

20. Select “Repair your computer”

21. Under Choose and option, click on “Troubleshoot”.

22. Under Advanced options, click “Command Prompt”.

23. Identify the drive that holds your Windows Installation

24. cd drive:\windows\system32

25. Rename the file used (the cmd file that was named as logonUI)

ren logonUI.exe logonUI-usedforpwdreset.exe

26. Rename the logonUIold.exe back to its original name

ren logonUIold.exe logonUI.exe

27. Restart Server and enter using the password you set in step 16! 

Links I refer to:

http://www.kieranlane.com/2013/09/18/resetting-administrator-password-windows-2012/

#passwordreset #windows2016 #windows2012 #servercore