This manual page documents briefly the
This manual page was written for the Debian distribution
because the original program does not have a manual page.
is a utility to view some information and change user passwords
in a Windows NT/2000 SAM userdatabase file, usually located at
\WINDOWS\system32\config\SAM on the Windows file system. It is not necessary to
know the old passwords to reset them. In addition it contains a
simple registry editor (same size data writes)
and hex-editor with which the information contained in a registry
file can be browsed and modified.
Show summary of options.
Username to change. Default is Administrator
List all users in the SAM database.
Interactive: list all users (as per -l) and then ask for the
user to change.
Registry editor with limited capabilities.
Use buffer debugger.
Show hexdumps of structs/segments (deprecated debug function).
ntfs-3g /dev/sda1 /media/win ; cd /media/win/WINDOWS/system32/config/
Mount the Windows file system and enters the directory
where Windows stores the SAM database.
chntpw SAM system
Opens registry hives
and change administrator account. This will work even if the name
has been changed or it has been localized (since different language
versions of NT use different administrator names).
chntpw -l SAM
Lists the users defined in the
chntpw -u jabbathehutt SAM
Prompts for password for
and changes it in the
registry file, if found (otherwise do nothing).
If you are looking for an automated procedure for password
recovery, you might look at the bootdisks provided by the
upstream author at
There is more information on how this program works available at
. This information includes in-depth information on how the
This manual page was written by
Javier Fernandez-Sanguino <email@example.com>,
for the Debian GNU/Linux system (but may be used by others).