How to change Windows password if you forget it without erasing the data?

Legal and security notice

Before taking any action, you should note that this guide includes methods that require physical or administrative access to the device. Only use these methods on devices that you own or have permission to manage. Unauthorized actions may be subject to legal prosecution.

Quick list of methods

This article covers the following methods:

• Reset Microsoft account password
• Using Installation Media/WinPE and accessing CMD (utilman method)
• Offline reset with chntpw or Offline NT Password & Registry Editor tool
• Password reset in domain environments (Active Directory / PowerShell)
• BitLocker considerations
• Using remote consoles (KVM/IPMI) and cloud services

Method 1: Reset with Microsoft account

If the user with a Microsoft Account If you log into Windows, the easiest way is to perform an online reset. Microsoft Recovery Page Go and select the “Forgot password” option.

Complete the authentication steps (email or SMS) and set a new password. Then log in to the Windows login page with the same email and new password.

Advantages: Simple and without external tools; data is preserved. Disadvantages: Only available for accounts connected to Microsoft Account.

Method 2: Using Installation Media or WinPE and running CMD (utilman method)

This method works for local accounts and when you have access to Installation Media or WinPE. The steps are outlined below.

Steps

1. Create a USB with Windows Installation Media or WinPE and boot from it.

2. On the Windows installation screen, press the keys Shift + F10 Press to open Command Prompt.

3. Identify the Windows partition (usually C: but it may have a different letter in the installation environment). Use the dir command to make sure that the path C:\Windows exists.

4. Replace utilman files with cmd so that on the login screen, clicking Ease of Access opens a Command Prompt with System privileges. Run the following commands:

copy c:\windows\system32\utilman.exe c:\windows\system32\utilman.exe.bak
copy c:\windows\system32\cmd.exe c:\windows\system32\utilman.exe

5. Restart the system and click on the Ease of Access icon on the login screen; now a system-level CMD will open.

6. Use CMD to change the password or enable Administrator. Examples:

net user "username" "NewP@ssw0rd"

net user Administrator /active:yes
net user Administrator "NewP@ssw0rd"

7. After successful login, be sure to restore the utilman file to its original state by rebooting from the Media and running:

copy c:\windows\system32\utilman.exe.bak c:\windows\system32\utilman.exe

Method 3: Offline reset with chntpw (for detached disks or Linux boot)

This method is suitable when you can connect a Windows hard drive to a Linux machine or boot from a Linux Live USB.

Requirements:

• A Linux system (could be VPS/Cloud or Live USB)
• chntpw package or ISO “Offline NT Password & Registry Editor”
• Accessing a Windows NTFS partition

Example commands on Ubuntu/Debian to install and run chntpw:

sudo apt update
sudo apt install ntfs-3g chntpw

sudo fdisk -l
sudo mkdir /mnt/win
sudo mount -t ntfs-3g /dev/sda2 /mnt/win

cd /mnt/win/Windows/System32/config

sudo chntpw -i SAM

# after changes
sudo umount /mnt/win

In the chntpw interactive menu, you can see the list of users, select the desired user, and click the clear or set password option.

Method 4: Domain Systems (Active Directory)

If the device is joined to a domain, the best and most secure way to reset the password is through the domain controller. From the Active Directory Users and Computers tool (dsa.msc), you can find the user and select the “Reset Password” option.

You can also reset the password with PowerShell on the DC server or through the management tool. Example of commands:

Import-Module ActiveDirectory
Set-ADAccountPassword -Identity "username" -Reset -NewPassword (ConvertTo-SecureString "NewP@ssw0rd" -AsPlainText -Force)
Unlock-ADAccount -Identity "username"

If you are using Azure AD/Intune, you can use the Azure AD portal to reset your password and sync with the device.

BitLocker: The most important obstacle before attempting an offline reset

If your drive is protected with BitLocker, Without the Recovery Key, it is not possible to access the contents of the drive. Check the BitLocker status before taking any action.

To check the status of BitLocker in the WinPE environment or after boot, you can use the following command:

manage-bde -status C:

manage-bde -protectors -get C:

The recovery key may be stored in your Microsoft account, Azure AD, or Active Directory (if configured).

Using cloud services and remote consoles (KVM/IPMI)

For virtual or dedicated servers hosted in a data center or cloud, the following features are typically available:

• Remote KVM/IPMI/iLO/iDRAC for direct boot from ISO and access to physical console
• Mount the disk to a rescue server or create a snapshot and attach it to a Linux VM to run chntpw
• Using the Rescue ISO provided by the hosting company

Solutions include booting from WinPE and running the utilman method, or using a snapshot and editing SAM in a Linux environment.

Security and Prevention Tips (Best Practices)

• Saving the BitLocker Recovery Key In secure locations (Microsoft account, Azure AD, or external secure file).
• Create a Password Reset Disk or use a Microsoft Account for old local accounts.
• Have a second admin account for emergencies and keep it safe.
• Regular backups (cloud snapshots, offline backups).
• Enable 2FA for important accounts and use a password manager.
• Log changes and document physical or KVM access for compliance and security.

Practical example: Recovering a Windows VPS on a cloud infrastructure (step by step)

1. Request Rescue Mode or Remote Console in the provider's panel.
2. From the KVM console, boot a WinPE or Windows Installation ISO.
3. Open CMD with Shift+F10 and check BitLocker status:

manage-bde -status C:

If the drive is not encrypted, run the utilman method; otherwise, use a disk snapshot and attach it to a Linux VM and run chntpw.

Conclusion

How to change Windows password if you forget it without erasing data? The answer depends on the account type, encryption status (BitLocker), and physical or console access.

For accounts connected to a Microsoft Account, the easiest way is to reset online; for local accounts, the utilman or chntpw methods work; for AD enterprise environments, central tools should be used. Always check the status of BitLocker and backups before taking any action.

Technical services and support

If you need practical help recovering your Windows password on a virtual or dedicated server, our technical team is available in over 85 global locations It offers features such as KVM/IPMI console, Rescue ISO, Disk Mount, and secure recovery operations without data loss.

Services include trading VPS servers, gaming VPS, GPU servers, and cloud servers with snapshot and backup capabilities. For instant support or to view plans, log in to your user panel or contact the sales and support team.

Frequently Asked Questions