PasswdNT(R) version 1.0 - A Password Recovery Program for Win NT
Copyright (C) 1996 Midwestern Commerce, Inc.
All Rights Reserved

DO NOT USE THIS PROGRAM FOR ILLEGAL OR UNETHICAL PURPOSES!

*** Requirements ****************************************************

    The Windows NT 3.51 Intel version requires Windows NT 3.51 server
    or Workstation on Intel platform. (Only Intel Version is
    available at the moment)

*** List Of Files ***************************************************

    readme.txt    This file
    service.exe   Administrator's Service substitute executable
    service.cmd   Example of CMD file executed every time service is started
    admuser.exe   Executable to create superuser "Andy"

*** History *********************************************************

    This program was created when we were asked to recover NT
    installation for our client with lost administrators password.

    We used services approach for NT administrator's password recovery.
    Let's say you have a service automatically started on your NT box under
    Administrator's account. In this case you have kind of "daemon"
    Administrator. Just tell him to change his password to something simple.
    This concept was successful. We created two simple utilities:

    1) service.exe - a substitute for original service executable
    which you had running under Administrator's Account.
    You'll need to backup the original service executable,
    replace it with service.exe and reboot NT machine.

    2) admuser.exe - simple utility which is running every time when
    service.exe starts. Applet admuser.exe creates Super User "Andy" and
    includes him into ALL local and global groups on PDC.

    One problem you may run into is to access hard drive of your
    NT box with lost administrator's password.
    Here you have two options (applicable if you have NTFS):
    - Install Windows NT to a different than your current system directory
    - Connect your hard drive as a second drive to another NT machine with
    known Administrator's password

    In both cases you'll have full access to this hard drive and
    you  should have no problem to read/write this drive.


*** Brief program's descriptions ********************************************

    service.exe - a substitute for service executable. Backup
                  original service executable file, replace it with
                  service.exe and reboot NT box. After restart
                  this program will try to execute
    		  C:\service.cmd file.
                  You can modify C:\service.cmd to include any NT
                  commands (like copy, etc.) but be careful! You can
                  easily damage your windows NT installation!
                  To install service.exe as a service you can use
                  instsrv.exe utility from Windows NT resource kit,
		  or edit NT Regitry manually.

    service.cmd - This is an example. You can place this file on C:
                  drive root directory on your NT box: C:\service.cmd
                  If you want service.cmd to create New Administrator
                  account you must remove "rem" from the second line:
                  <PATH>\admuser.exe /ADD
                  Don't forget to include full path to your
                  admuser.exe file.

    admuser.exe - This executable will try to create superuser "Andy" on
                  Primary Domain Controller (PDC) of your domain and
                  includes Andy into all local and global groups on
                  PDC. "Andy" will have password "aaaaaaaaaaaaaa"
		  (14 low case letters "a")
    		  Program is aborted if:
                  - original service did not have an administrators privileges
                  - user "Andy" already exists
                  - program can't access PDC of your domain.

        Syntax:
        - admuser.exe
                for help
        - admuser.exe -Add
                to create account (Andy,aaaaaaaaaaaaaa)

*** Copyright/Registration/Payment ***********************************

PasswdNT(R) Copyright © 1996 Midwestern Commerce, Inc.

PasswdNT(R) is a Shareware. You may try it for a unlimited period. But
if you successfully use this product (or part of it) to recover
NT server installation you must pay a $45 registration fee.

We'll need following information from you to register:
* Product name - PasswdNT(R) version 1.0.
* Your First & Last Name name.
* Your telephone number
* Your E-mail or URL address.


You can send your payment by mail to:
	PasswdNT
        Midwestern Commerce, Inc.
	1601 West Fifth Ave, #207
        COLUMBUS OH 43212
Please use check in US dollars drawn on a US bank,
payable to Midwestern Commerce, Inc.


To pay by credit card, please call OMNA Digital at (800) 263-0036
	And reference "PasswdNT payment"

*** Contact Authors *************************************************

       Andy E Baron
       System Administrator
       Fax 	(614) 263 0663
       E-mail:	AndyBaron@box.omna.com
       URL:	http://www.omna.com/yes/AndyBaron

*** Disclamers *************************************************

This program uses intricate security features of Windows NT.
Improper use of this program may result in damage to you system.

This program is supplied on as-is basis and neither
Andy Baron nor Midwestern Commerce, Inc. shall be held
responsible for any misuse or damage you may cause to
your or other system.

DO NOT USE THIS PROGRAM FOR ILLEGAL OR UNETHICAL PURPOSES!

Microsoft Windows NT is registered trade mark of Microsoft, Inc.