Solved Windows 11 local account admin password reset locked out ren cmd.exe utilman.exw method not working.

Changed password two nights backand new password/old password not working.
Not sure if it was a typo but did check using eye symbol to ensure I made a note of the new password at time of reset.
When attempted logon neither passwords work.
This is a local account and whilst I have used the safe mode shift restart, troubleshooting cmd prompt ren ulilman.exe utilman1.exe method previously this time round I'm hitting an error.
When entering the second command
Ren cmd.exe utilman.exe
I am receiving file not found error.

I've attempted sfc /scannow and rebooted to windows logo screen and attempted the safe mode. Cmd prompt again. Same issue.

The reset password option prompts for USB stick which I have never done. Lesson learnt.

Have tried to enter password of various combinations just in case of a typo which was simply password Sunday (kept it simple as wanted to keep our son of the rig for the morning).

I am desperate here, whilst I have a backup of the system I really want to avoid a resintall due to time (takes 3 to 5 days with software authorisation and updates) as this week I have a lot of important work to sort.

Any help or links be great.

As an additional reading through am I correct in reading the ren cms.exe utilman.exe method no longer works.

Can see a different site refers to Hirens boot disk not something I've ever used.

Tried contacting Microsoft support. As a home user the UK contact number keeps referring me to website.

So the only link I can see is


Not convinced this will work but running through it now.
OK that's useless just checks if admin account is active with password.

I can see on reddit
Starting to get a little uncomfortable.

Please help. Im screwed. Thankyou

Ren cmd.exe utilman.exe
I am receiving file not found error

Click to expand...

have a look and see what has happened to it. You can look from winre using notepad

SIW2 said:

have a look and see what has happened to it. You can look from winre using notepad

Click to expand...

Hi as I understand this has been adapted by Win Defender.
I'm looking at a credit thread which suggest renaming system32\drivers wd ie to wd1.

Not sure if this will convolute the issue further?

Tried it same issue persists.
Returned wd1 to wd
Is Jayro's Lockpick v2021.12 WinPE jayros lockpick any good not tried this yet.

BTW called Microsoft UK helpline. Once it knows your home user returns you to website. Useless. Only guidance there I could fine was to see if admin password was setup up etc. Which it obviously is.

In this guide, you’re going to learn how to reset a forgotten local user login password on any Windows computer using Kali Linux.

FreeBooter said:

In this guide, you’re going to learn how to reset a forgotten local user login password on any Windows computer using Kali Linux.

Click to expand...

Trying this now. Will report back.

MYSTA said:

Trying this now. Will report back.

Click to expand...

Hi and thankyou so much.

I am upto chntpw -l SAM
Reporting as in photo not sure how to resolve please help further.

So much appreciated.

Mark

Addum just trying shift shutdown to disable hibernation I hope. Relaunching Kali now.
Same result.

Any advice please.

The chntpw command cannot found the SAM registry file is the SAM registry file exist at the location you opened terminal console?

FreeBooter said:

The chntpw command cannot found the SAM registry file is the SAM registry file exist at the location you opened terminal console?

Click to expand...

Sorry for slow response.
There are several
Sam Lowercase
SAM. LOG1
SAM. LOG2
and 3 Sam registry files.

Thank you

Okay i see sam registry file but for some reason it has lower case name, maybe this the reason chntpw command cannot found the SAM registry file not sure.

If you want you can enable hidden Administrator account and from that account you can open Command Prompt execute net user command to list users and execute net user UserAccount * command press enter key twice to reset the UserAccount password to blank.

In this video, you will find detailed instructions on how to enable the hidden administrator account on Windows 11,10, 8, 7 or Vista based computer, by modifying the Windows Registry Offline in case you cannot login to Windows by using another account with admin rights.

Thanks freebooter I'll have a look when back home.
I'll check to see if lowercase brings up the same or not prior to trying the hidden admin method.

Good luck!

FreeBooter said:

Good luck!

Click to expand...

OK back home finally and thanks for your patience.
So it appears the command chntpw - l is case sensitive.

So I can see the users kids and my admin account.

I've tried the chntpw - u for both accounts as one is admin and the other not.

I am not getting the next set of options for the password removal etc.

Any advice as I am not clear on any error message or understand why I am not seeing the options before I try the second method posted please.

FreeBooter said:

If you want you can enable hidden Administrator account and from that account you can open Command Prompt execute net user command to list users and execute net user UserAccount * command press enter key twice to reset the UserAccount password to blank.

In this video, you will find detailed instructions on how to enable the hidden administrator account on Windows 11,10, 8, 7 or Vista based computer, by modifying the Windows Registry Offline in case you cannot login to Windows by using another account with admin rights.

Click to expand...

With this method I am wondering how this helps reset the password or does it disable my login account as an administrator.
Sorry I'm a little confused on what I would achieve before proceeding?
I'm thinking as we now know the SAM file is Sam case sensitive.
However I am not any expert, but I do understand the video is referring to the hive.
In my Sam list I can see a reference to Hive but not sure how the two relate to proceed?
Thank you.

I've just re read it.
So this will create a second admin account and will this then allow me to enter the ren utilman. Exe Sam process or something different.

OK so I've created the second admin account and on the system which is great.
However cmd prompt is not running and appears to be ghosted. See piccie.
Help please we are getting somewhere maybe

Addum I'm creatine in environment systemwiw 32 see if that gets cmd prompt back.

I'm I correct once and in the secondary admin account as per your post,I can remove the admin password on my original admin account then simply delete the secondary admin account I created?

Cmd prompt still ghosted in the admin temp account.
I shift hold rebooted.
Went to recovery blue screen (sorry can't recall it's name atm) and troubleshootibg option has no cmd. Exe showing.
So I launch win11 usb iso and cmd. Exe launched.
Navigated to the os drive
Netuser shows
Aninistrator. Default account. Guest
WDAGUtilityAccoubt
The command completed with 1 or more errors.
Tried entering and not sure I understand the whole command line to enter from the post.
So type the command
"UserAccount *" <<<do I need to replace * or type as is thanks?
press enter key twice to reset the UserAccount password to blank.

Not. Seeing it.

How till I get back into my original admin account as it appears this admin work around in the second video no longer works in Windows 11 maybe, maybe I'm missing something? It appears to create a guest admin account and that seems to be blocking various windows functions including the cmd.exe prompt.
Thanks.

Just to confirm the ren utilman.exe doesn't work as system can't fine cmd to rename.

So I relaunched Kali and attempted the 1st video still requires password.

Which steonto take next please?

It is probably because you previously renamed cmd.exe to something else

which would explain your earlier error message when cmd.exe could not be found

Ren cmd.exe utilman.exe
I am receiving file not found error

Click to expand...

If you dont know what you renamed it to, copy cmd.exe from winsxs to system32

on my system it is in
amd64_microsoft-windows-commandprompt_31bf3856ad364e35_10.0.22621.2506_none_6ae72c5495fc1170




voidtools everything is handy for locating things in winsxs

SIW2 said:

It is probably because you previously renamed cmd.exe to something else

which would explain your earlier error message when cmd.exe could not be found

If you dont know what you renamed it to, copy cmd.exe from winsxs to system32

on my system it is in
amd64_microsoft-windows-commandprompt_31bf3856ad364e35_10.0.22621.2506_none_6ae72c5495fc1170

View attachment 98868


voidtools everything is handy for locating things in winsxs

Click to expand...

Brilliant move thank you

Cmd prompt is back.


Got to review and recall next steps

@MYSTA how is resetting password progressing?

FreeBooter said:

@MYSTA how is resetting password progressing?

Click to expand...

@FreeBooter
Hi thanks for coming back, been at it for last few hours.

Bring upto date.
I am still locked out of my original admin account.
I have a second adminstator account as per video.
This new admin account has cmd.exe now running.

In net use it shows
Administrator guest account

I have also attempted the disable password accounts in Kali.
I can see my Mark admin account along with the new administrator account in Kali and the password command is now working with the second option screen to choose 1 and yes is functioning.
It hasn't removed the password.

Summary I am in the new admin account.
Cmd.exe is now working.


What next please my friend