Now let's try out password and registry editor.
It works with every Windows version as we mentioned.
Encryption won't protect the password from deletion encryption and Schurz secure storage.
But no matter what encryption algorithm was used encrypted data can be deleted too
security that comes from encryption pertains to confidentiality only password and registry editor gives
you a text based interface only.
First you have to define the operating system Dr..
Then you have to find the SAM file directory.
The program will suggest the default path to the directory.
You just have to press enter
the program found the same file option number one the default option is to reset password.
This is the option we will use.
Now let's use Option 1 again because we want to edit the user's password.
We can see the list of all system users.
The list includes not only names but also information whether a given user really has administrator
privilege.
We can also learn whether an account is locked the user name the administrator has administrator privileges
his account isn't locked.
We can easily delete his password.
We type the user name Administrator and we choose Option one again clearing the user password
the password of the user administrator is now deleted after saving the changes we can close the program
we remove the CD and start the operating system again.
If everything worked fine we'll be able to log into the account of the user administrator who has administrator
privileges
the account is unlocked and has no password.
The examples presented above and at showing you that the defense in depth model has its limitations.
Local attacks constitute one of them even if you invested lots of money in the security of all the other
layers.
Having no physical security measures means having no security at all.