Yo, aint posted in here for a while. Got a question thats been bugging me for a while now.
Ive got an account on this computer (Windows XP), there should be one or two files in it. Now I have forgotten the password to log on, obviously I have physical access. This is what i was planning on doing.
I was gonna boot the computer with a Knoppix STD live CD. Then i can run ntpassword, which bearing in mind i have never used before. Supposedly this inserts a new password hash into the sam, therefore allowing me access. Someone told me that this wont let me view any files that have been encrypted using EFS, which is a windows standard.
My question is this, if i use ntpassword to change the password hash and login with the new password, will i be able to view any files? Does Windows encrypt everything automatically using EFS?
Any help is muchos appreciated, and yes, ive googled