{"id":164,"date":"2014-05-15T23:14:05","date_gmt":"2014-05-15T23:14:05","guid":{"rendered":"http:\/\/nofl.biz\/blog\/?p=164"},"modified":"2022-03-29T20:49:22","modified_gmt":"2022-03-29T20:49:22","slug":"remove-windows-8-from-a-domain-without-the-domain-admin-password","status":"publish","type":"post","link":"https:\/\/beneford.com\/Blog\/index.php\/2014\/05\/15\/remove-windows-8-from-a-domain-without-the-domain-admin-password\/","title":{"rendered":"Remove Windows 8 from a domain without the domain admin password"},"content":{"rendered":"<p>There are situations where you need to break into Windows 8 (or 7, or XP).<br>For example, when a domain controller has disappeared and there are no cached credentials on the computer.<\/p>\n<h2>You will need:<\/h2>\n<p>A windows 8 (or 7) installation disk.<\/p>\n<h2>Here&#8217;s how:<\/h2>\n<p>There are three steps:<\/p>\n<ol>\n<li>Break in to the computer so we have a command prompt where we can &#8216;do things&#8217;<\/li>\n<li>Create a new user with local administrator rights<\/li>\n<li>Remove the computer from the domain.<\/li>\n<\/ol>\n<h3>Step 1: break in<\/h3>\n<p>Boot the computer from the Windows 7\/8 Install Disk (I&#8217;m using Window 8 for this example):<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Press-any-key-to-boot-from-CD-or-DVD.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-167 size-medium\" title=\"Press any key to boot from CD or DVD\" src=\"\/wp-content\/uploads\/2014\/05\/Press-any-key-to-boot-from-CD-or-DVD-300x76.png\" alt=\"Press any key to boot from CD or DVD\" width=\"360\" height=\"40\"><\/a><\/p>\n<p>Select the language&nbsp;appropriate for your computer\/keyboard:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Language-Preferences.png\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-168\" title=\"Language Preferences\" src=\"\/wp-content\/uploads\/2014\/05\/Language-Preferences-300x221.png\" alt=\"Select Language Preferences and press Next\"><\/a><\/p>\n<p>If you have the Windows 8 installation disk, you can press Shift+F10 here and skip the next few screens &#8211; that brings up a command prompt immediately.<br>Or click Next and then &#8216;Repair your computer&#8217;:<br><a href=\"\/wp-content\/uploads\/2014\/05\/Repair-your-computer.png\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-169\" title=\"Repair your computer\" src=\"\/wp-content\/uploads\/2014\/05\/Repair-your-computer-300x222.png\" alt=\"Click 'Repair your computer'\"><\/a><\/p>\n<p>Then select: &#8216;Troubleshoot&#8217;:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Troubleshoot.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-170\" title=\"Troubleshoot\" src=\"\/wp-content\/uploads\/2014\/05\/Troubleshoot.png\" alt=\"\"><\/a><\/p>\n<p>The select Advanced options:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Advanced-Options.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-171\" title=\"Advanced Options\" src=\"\/wp-content\/uploads\/2014\/05\/Advanced-Options.png\" alt=\"\"><\/a><\/p>\n<p>Finally, select Command Prompt:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Command-Prompt.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-172\" title=\"Command Prompt\" src=\"\/wp-content\/uploads\/2014\/05\/Command-Prompt.png\" alt=\"\"><\/a><\/p>\n<p>Then you need to check and select the drive letter where windows is installed (it is not always the C: you normally see within Windows). You can do this with &#8216;DISKPART&#8217; and&nbsp;&#8216;LIST VOL&#8217;. The drive should be clear from what you see unless you have a complicated disk setup:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Find-Boot-Drive1.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-174\" title=\"Find Boot Drive\" src=\"\/wp-content\/uploads\/2014\/05\/Find-Boot-Drive1.png\" alt=\"\"><\/a><\/p>\n<p>Then we temporarily replace Utilmon.exe with cmd.exe and reboot:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Use-cmd-as-utilman.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-175\" title=\"Use cmd as utilman\" src=\"\/wp-content\/uploads\/2014\/05\/Use-cmd-as-utilman.png\" alt=\"\"><\/a><\/p>\n<h3>Step 2: Creating an user with administrator rights<\/h3>\n<p>Then we let windows boot through to the sign-on screen. UtilMan is run by clicking on the Ease of Access button, which brings up our command line.<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Ease-of-Access.png\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-176\" title=\"Ease of Access\" src=\"\/wp-content\/uploads\/2014\/05\/Ease-of-Access-300x218.png\" alt=\"\"><\/a><\/p>\n<p>If we don&#8217;t have a valid user, we can now create one:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Create-user-admin.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-177\" title=\"Create user admin\" src=\"\/wp-content\/uploads\/2014\/05\/Create-user-admin.png\" alt=\"net user admin NewPass5 \/add &amp;&amp; net localgroup administrators admin \/add\"><\/a><\/p>\n<p>Then close the window and log on with the newly created user: admin.<br><a href=\"\/wp-content\/uploads\/2014\/05\/Sign-in-as-admin.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-178\" title=\"Sign in as admin\" src=\"\/wp-content\/uploads\/2014\/05\/Sign-in-as-admin.png\" alt=\"\"><\/a><br>Note: you do need to type the name of the computer in front of user name (COMPUTERNAME\\admin). If you don&#8217;t know what the computer is called, just type &#8216;administrator&#8217; as the username and Sign in to: will tell you the computer name.<\/p>\n<p>At this point, you can undo the &#8216;UtilMan.exe&#8217; break-in by opening a command prompt (as admin) and undoing what we did before. [Windows]+X and select &#8216;Command Prompt (admin)&#8217;:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Restore-utilman.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-179\" title=\"Restore utilman\" src=\"\/wp-content\/uploads\/2014\/05\/Restore-utilman.png\" alt=\"\"><\/a><\/p>\n<h3>Step 3: Forcefully removing the computer from the domain<\/h3>\n<p>Bring up the system properties: Alt+X, System, and click on Computer name, domain and workgroup settings: Change settings:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Change-domain2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-194\" title=\"Change domain\" src=\"\/wp-content\/uploads\/2014\/05\/Change-domain2.png\" alt=\"\" width=\"812\" height=\"502\"><\/a><\/p>\n<p>Then click &#8216;Change&#8230;&#8217; to change the domain or workgroup:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Change-domain-or-workgroup1.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-183\" title=\"Change domain or workgroup\" src=\"\/wp-content\/uploads\/2014\/05\/Change-domain-or-workgroup1.png\" alt=\"\"><\/a><\/p>\n<p>Set the computer to be in the Workgroup: WORKGROUP:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Set-WORKGROUP.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-184\" title=\"Set WORKGROUP\" src=\"\/wp-content\/uploads\/2014\/05\/Set-WORKGROUP.png\" alt=\"\"><\/a><\/p>\n<p>Confirm that we know the local administrator password (set the admin user we created in step 2 is fine):<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Need-to-know-local-admin-password.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-185\" title=\"Need to know local admin password\" src=\"\/wp-content\/uploads\/2014\/05\/Need-to-know-local-admin-password.png\" alt=\"\"><\/a><\/p>\n<p>You will be asked for credentials: use the credentials for the admin user we created:<\/p>\n<p><a href=\"\/wp-content\/uploads\/2014\/05\/Use-Local-Password.png\"><img decoding=\"async\" class=\"alignnone size-full wp-image-186\" title=\"Use Local Password\" src=\"\/wp-content\/uploads\/2014\/05\/Use-Local-Password.png\" alt=\"\"><\/a><\/p>\n<p>Then OK all the dialog boxes and reboot.<br>Log back in as &#8216;admin&#8217; and set up any users you need.<\/p>\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>There are situations where you need to break into Windows 8 (or 7, or XP).For example, when a domain controller has disappeared and there are no cached credentials on the computer. You will need: A windows 8 (or 7) installation disk. Here&#8217;s how: There are three steps: Break in to the computer so we have [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-164","post","type-post","status-publish","format-standard","hentry","category-pc-support"],"_links":{"self":[{"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/posts\/164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/comments?post=164"}],"version-history":[{"count":3,"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/posts\/164\/revisions"}],"predecessor-version":[{"id":239,"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/posts\/164\/revisions\/239"}],"wp:attachment":[{"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/media?parent=164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/categories?post=164"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/beneford.com\/Blog\/index.php\/wp-json\/wp\/v2\/tags?post=164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}