General principle: use WinPE system to clear the password.

1. Find a pirated windows xp installation disk, about 3 yuan. The pirated products I bought are well-known and have deep technology.

2. Start the target computer, enter the BIOS and set the disk to IDE mode. This can prevent the waiting PE system from detecting the disk and seeing the disk information.

3. Put the installation disk into the computer, restart and enter the installation disk interface. Select WinPE system. Enter.

After entering, open "My Computer" and do the second step. You should be able to enter disk C. Enter the folder C:\windows\system32. (My original win7 system was installed on drive C)

5. Find magify.exe, change its owner to administrator, and change its permissions to administrator full control. These steps are performed by right-clicking Magnify. Exe->; Property completed.

6. Similarly, perform the operation of step 5 for cmd.exe.

7. Modify magnify.exebackupbackup to magnify.exebackup and cmd.exe to magnify.exe.

8. Restart the system and enter the login interface where you forgot your password.

9. See a button in the lower left corner of the screen, all of which are auxiliary functions, and select the screen magnifying glass. At this time, the window of cmd pops up.

10. Type the command: Network User Administrator/Activity: Yes.

1 1. Typing the command: net user administrator ""will actually clear the administrator's password.

12. At this time, the password has been cleared. Click the login button to log in to the system directly.

Note: 1. After logging in, remember to change the newly changed file back to its original state, otherwise it will leave a back door.

2. If other users forget their passwords. Just replace the administrator in the two net commands with the corresponding user name.

Principle: In the windows7 boot interface, there are some auxiliary functions in the lower left corner. These auxiliary functions correspond to some small programs. For example, the magnifying glass here corresponds to magnifying. You can use it without logging in. The entry point is here. We entered through the PE system and disguised cmd.exe as Magnify.exe. In this way, the administrator is granted the right to use cmd without entering the system, and the net command can be directly executed to clear the password.