Resetting Windows Local Admin Password Using Utilman.exe Utility

Requirements

ISO of Windows Setup. Prefer same OS ISO if possible.

Steps

1. We will first mount the ISO to the Physical / Virtual Machine & boot the VM from it. 

Mounting ISO

Open Boot Menu by Pressing F10,F11 ( Depends on the machine you are using).

Select CD ROM Drive & machine will start loading the Setup.

Press Shift + F10  when you see below screen. This will open command prompt.

We need to edit some files in System32 under Windows folder, so first step should be to detect the  drive where OS is installed.

Use Diskpart & then list volume. This will list all the Volumes currently present on the System.

Note C volume is of 350 MB, so OS can't be present on it. 

Let's traverse to D drive to see what files & folders are present on it. To do this, we first need to exit Diskpart.

Switching to D Volume by typing D:\

To view the content of D volume type dir.

Folders such as Windows, Users , Programs files etc clearly indicates D volume is OS drive.

We will first traverse to System32 folder using below command.

Cd .\Windows\System32

We will then rename utilman.exe to some other name. Here I have renamed Utilman.exe to Utilman.exe.Old

Once Utilman.exe is renamed, we will then copy cmd.exe Utilman.exe

We will then exit the setup and continue to boot the VM normally. Make sure you are not booting the System from CD drive.

Once Welcome screen comes, we will click on below highlighted Icon to trigger Utilman.exe. ( Note - Since we have copy cmd.exe as utilman.exe, hence once we click on the Icon, it will open command prompt).

Type net user command to view all the local account configured on the VM.

Below screenshot show Administrator as the Only Local account & we will be resetting password for it.

To reset type net user "Account Name" * & hit enter. It will then ask us for new password. Proceed with typing the new password & confirm the same. Once done hit enter & the password will be set.

Note - Password typed while resetting won't be visible, so make sure password matches while resetting.

We can then login to the machine & verify the same.