You are Here:
Linux Lite 4.4 Final has been released. See the Release Announcements section for more information.



[ HELPFUL TIP ] recover Windows files, passwords, etc. with Linux Lite

Author (Read 2227 times)

0 Members and 1 Guest are viewing this topic.

recover Windows files, passwords, etc. with Linux Lite
« on: July 25, 2017, 10:36:05 AM »
 

trinidad

  • Gold Level Poster
  • *******
  • 937
    Posts
  • Country: us
  • Reputation: 165
  • Linux Lite Member
    • dbts-analytics.com

  • Linux Lite: 4.2 64bit

  • CPU: AMD A8 5500 4 cores

  • MEMORY: 8Gb

  • VIDEO CARD: AMD/ATI Radeon HD 7560D
-chntpw-

These days it is fairly common in households and small businesses for there to be more users than computers available. Many families can only afford one household computer, and many small businesses are run on one or two office machines. This can be problematic when users with administrative privileges come and go on a Windows machine, such as growing children, or former employees. On every Windows dual boot machine I set up for people (usually LL or Ubuntu LTS) I add chntpw and foremost after intalling. This saves me a lot of time when the inevitable lost password or lost file issue happens for the Windows users. Both these tools can be run from a live Ubuntu or Kali disk as well. To use them on a live Ubuntu LTS disk you will have to add the universe repository first. Having them already installed on a working Linux system dual booted with Windows on the same machine is much fatser though. If you dual boot with Windows they may come in handy for you. You can install them both from synaptic or a terminal in Linux Lite.

*If you are using an Ubuntu 16.04 series LTS live disk you will need to be connected to the Internet. Open a terminal and type the following commands one after the other as the tasks complete:
sudo add-apt-repository universe
sudo apt-get update
sudo apt-get install chntpw

Open your file manager and make sure Windows is mountable. If you get a message that the Windows drive is not mountable because of file permissions, or a longer message about file orphans, shut down your machine and reboot Windows and login as an administrator if you can. Then shut Windows down holding the shift key down until the mchine goes off. Reboot back into your Linux system and Windows will be mountable.

*If you are using a live Linux disk you will have to go through the steps to add chntpw again.
*If you cannot boot into Windows as an administrator you may have to unplug and/or remove your battery aftyer shutting down Windows. (hard reset)

Once you are back in your Linux system open your file manger and mount the Windows drive. Type: Ctrl+l and the location of your Windows drive will appear in the location bar of your file manager. Copy it. Now open a terminal and type the following command to mount the Windows drive:
cd (paste the location you copied from file manger)/Windows/System32/config and hit Enter.

Then start chntpw with the following command:
sudo chntpw -l SAM

Decide which listed user you wish to clear the password for and enter the following command:
sudo chntpw -u (the user name you wish to clear the password for) SAM
If the user name is proper such as Joe Smith you will need to use quotation marks around it. If it is a single word or name you won't.

Type: 2 and hit Enter (if the user account is locked)
Type: 1 and hit Enter
Type: y and hit Enter
The password will be cleared

Exit chntpw. Exit the Windows directory. Exit the terminal. Unmount the Windows drive in file manager. Shut down. Boot into Windows and sign in to the user without a password.

Below are some helpful links about chntpw:

http://www.techrepublic.com/blog/tr-dojo/reset-windows-passwords-with-the-help-of-linux/
https://www.howtogeek.com/236807/how-to-mount-your-windows-10-or-8-system-drive-on-linux/
http://technozed.com/enable-universe-repository-ubuntu/

-foremost-

To recover lost files from your Windows drive using Linux foremost has the most features. See the link below.

https://www.howtoforge.com/recover-deleted-files-with-foremost

-scalpel-

Scalpel is a Linux file carver for recovering lost files on a Linux system. It is handy because it can be configured to find lost LibreOffice files. The link below contains the configurations to find lost LibreOffice files. You can copy and paste them into scalpel's configuration file.

https://community.linuxmint.com/tutorial/view/1332

They all work in Linux Lite.

TC
(posted from a Toshiba Satellite running Windows 8.1 with Kaspersky Secure Connection)
"You can't depend on your eyes when your imagination is out of focus."
 


Re: recover Windows files, passwords, etc. with Linux Lite
« Reply #1 on: July 25, 2017, 10:50:12 AM »
 

Jerry

  • Linux Lite Creator
  • Administrator
  • Platinum Level Poster
  • *****
  • 6827
    Posts
  • Country: nz
  • Reputation: 629
  • Linux Lite Member
    • Linux Lite OS

  • Linux Lite: 3.8 64bit

  • CPU: Intel Xeon Dual CPU's E5645 2.4GHz 12 Cores

  • MEMORY: 16Gb

  • VIDEO CARD: nVidia GeForce GTX 960
Very helpful, thank you @trinidad
FYI, the universe repo should be already enabled in Series 3.x
Last Edit: July 25, 2017, 10:53:54 AM by Jerry
 

Re: recover Windows files, passwords, etc. with Linux Lite
« Reply #2 on: July 25, 2017, 09:54:01 PM »
 

bitsnpcs

  • Platinum Level Poster
  • **********
  • 3131
    Posts
  • Country: ie
  • Reputation: 297
    • PrettyDizzy

  • Linux Lite: 3.2 64bit
Very interesting and helpful @trinidad  :)


Last Edit: July 25, 2017, 11:06:22 PM by bitsnpcs
 


Tags:
 


Linux Lite 4.4 Final has been released. See the Release Announcements section for more information.