How To get Admin Access on Windows (7/8/10) in Minutes

Watch how to exploit a known vulnerability and create a new User account with full Administrator permissions in less than 4 minutes! As a Consultant I often get Windows computers from Customers, Family, and Friends to fix. They don't always supply the power cords or even passwords for the accounts. But if I have access to the console and the BIOS/UEFI is unlocked allowing to boot from a USB/DVD - I'm in in no time. A Windows 10 Installer USB/DVD makes it easy. In the video, first I show you the existing accounts and members of the Administrators group. Then logoff and "try" to logon without knowing the password. Next the machine is rebooted with the Windows 10 Install Media. At the "Windows Setup" screen (1:27), press Shift-F10 to bring up a Command-Prompt. You can exploit any of the Accessibility components (On-screen Keyboard, Magnifier, etc.) or just use the Utility Manager (easiest). Make a copy of utilman.exe for restoring. Copy cmd.exe on top of utilman.exe Reboot At the logon prompt (2:28) click the Accessibility icon and the Command Prompt should appear. If you only wish to reset an existing user password, NET USER JoeUser JoesNewPassword If JoeUser didn't exist, NET USER JoeUser JoesNewPassword /Add If JoeUser is not in the Administrator group, add it NET localgroup Administrators JoeUser /add Close the cmd Window and login using the account and password. Don't forget to boot back to the installer and cleanup the hacked files