Reset password administrator in Windows 8 with UEFI

Today I had to access a PC, of which I did not know the password, this PC has Windows 8 + UEFI.

Requirements

#

• CD/DVD/USB disc
• Ubuntu, Mint or any other linux distribution such as Damn Small Linux (50 mb) in case you are in a hurry.
• Of course, a Windows 8 PC with or without UEFI.
• Unetbootin

Steps for USB

#

1. Download a Linux and unetbootin.
2. Meanwhile disable in BIOS (F2, Del, F12), secure boot, UEFI and related options (varies according to brands and versions)
3. Open Unetbootin -> Select ISO -> Select Pendrive ->Start
4. Insert the Pen drive into the PC to be “unlocked”
5. Configure the BiOS to boot from the pen drive
6. Boot Linux from the pen drive

   1. Go to File Explorer

   2. Enter C:\Windows\System32

   3. Bringing Utilman.exe to Utilman.exe.bak

   4. Jump to:

      1. 32Bit OS -> C:Windows
      2. 64-Bit OS -> C:WindowsSysWOW64

   5. Copy cmd.exe

   6. Paste into C:\Windows\System32 with the name Utilman.exe

   7. Restart and take out the flash drive

   8. On the login screen, click on accessibility

   9. Type in the console

      NET USER USUARIO_DEL_PC PASSWORD_ELEGIDO

   10. If the account is part of Windows Live and cannot be recovered via the web, you must create a new Local Administrator account. To do this, enter the following command.

   11.  NET USER /add USUARIO_DEL_PC_A_CREAR
        NET LOCALGROUP administrators USUARIO_DEL_PC_A_CREAR/add

       Password will be empty

   12. Perform the reverse process to restore the “security” of your system

NOTE

#

If you’re using a CD, burn the ISO to one. And skip step 3

WISE NOTE

#

This is not the first time that accessibility options have allowed greater “accessibility” to an attacker :P.