Hardware - Support > Tutorials

recover Windows files, passwords, etc. with Linux Lite


Older post but still usefull and bookedmarked it! Thanks!

Since then, have you tried chntpw with a Windows10/UEFI/GPT hard drive?

In the land of Unicorns, I wish it could reset a bit-locker locked OS too.
People always lose their keys (or don't even take them down...) then, after a crash of other Windows problem...
Them : "I wanted to be secure, can you get my files back?" - Me : "Nope, you need to have your BitLocker key" - Them : "I see, then you are not that good an IT guy..."
I sooo feeel like Dilbert sometimes.

I'm confident of recovering password back,as i did it on my computer 2 months ago with it: https://www.winpwd.com/  And for how to recover files on Windows computer,you can look in the recyling bin (Note:Whether or not the deleted data is in the recycling bin depends on how it was deleted).

Very interesting and helpful @trinidad  :)

Very helpful, thank you @trinidad
FYI, the universe repo should be already enabled in Series 3.x


These days it is fairly common in households and small businesses for there to be more users than computers available. Many families can only afford one household computer, and many small businesses are run on one or two office machines. This can be problematic when users with administrative privileges come and go on a Windows machine, such as growing children, or former employees. On every Windows dual boot machine I set up for people (usually LL or Ubuntu LTS) I add chntpw and foremost after intalling. This saves me a lot of time when the inevitable lost password or lost file issue happens for the Windows users. Both these tools can be run from a live Ubuntu or Kali disk as well. To use them on a live Ubuntu LTS disk you will have to add the universe repository first. Having them already installed on a working Linux system dual booted with Windows on the same machine is much fatser though. If you dual boot with Windows they may come in handy for you. You can install them both from synaptic or a terminal in Linux Lite.

*If you are using an Ubuntu 16.04 series LTS live disk you will need to be connected to the Internet. Open a terminal and type the following commands one after the other as the tasks complete:
sudo add-apt-repository universe
sudo apt-get update
sudo apt-get install chntpw

Open your file manager and make sure Windows is mountable. If you get a message that the Windows drive is not mountable because of file permissions, or a longer message about file orphans, shut down your machine and reboot Windows and login as an administrator if you can. Then shut Windows down holding the shift key down until the mchine goes off. Reboot back into your Linux system and Windows will be mountable.

*If you are using a live Linux disk you will have to go through the steps to add chntpw again.
*If you cannot boot into Windows as an administrator you may have to unplug and/or remove your battery aftyer shutting down Windows. (hard reset)

Once you are back in your Linux system open your file manger and mount the Windows drive. Type: Ctrl+l and the location of your Windows drive will appear in the location bar of your file manager. Copy it. Now open a terminal and type the following command to mount the Windows drive:
cd (paste the location you copied from file manger)/Windows/System32/config and hit Enter.

Then start chntpw with the following command:
sudo chntpw -l SAM

Decide which listed user you wish to clear the password for and enter the following command:
sudo chntpw -u (the user name you wish to clear the password for) SAM
If the user name is proper such as Joe Smith you will need to use quotation marks around it. If it is a single word or name you won't.

Type: 2 and hit Enter (if the user account is locked)
Type: 1 and hit Enter
Type: y and hit Enter
The password will be cleared

Exit chntpw. Exit the Windows directory. Exit the terminal. Unmount the Windows drive in file manager. Shut down. Boot into Windows and sign in to the user without a password.

Below are some helpful links about chntpw:



To recover lost files from your Windows drive using Linux foremost has the most features. See the link below.



Scalpel is a Linux file carver for recovering lost files on a Linux system. It is handy because it can be configured to find lost LibreOffice files. The link below contains the configurations to find lost LibreOffice files. You can copy and paste them into scalpel's configuration file.


They all work in Linux Lite.

(posted from a Toshiba Satellite running Windows 8.1 with Kaspersky Secure Connection)


[0] Message Index

Go to full version