1. Creating and Using Password Reset Disks

A password reset disk is an important part of any password-protected PC. It’s the only method of password recovery that allows you to retain all data in an account in the event of a forgotten password. Advanced features such as EFS (Encrypting File System) encryption, personal certificates, and stored network passwords can be recovered only by using a password reset disk.

The trick is that you need to create the password reset disk before you forget the password. You can’t do it after you’ve forgotten the password. Keep that disk in a safe place where you can find it when you need it, but where others can’t find it to gain unauthorized access to the administrative account.

A USB flash drive or memory card works equally well. However, a memory card will work only if your computer has slots for inserting a memory card.

Choosing a memory device for the password reset

A USB flash drive (also called a jump drive) is a small device that plugs into a USB port on your computer and looks and acts like a disk drive. A memory card is a storage device commonly used to save pictures in digital devices, like cameras or smartphones. If your computer has slots for such cards, you can slide a card into the slot and treat the card just as you would a USB flash drive. See Chapter 28 for more information.

To see examples and get an idea of cost, check out some online retailers. Then search the site for flash drive, jump drive, or memory card reader to view available products. If you’re looking at memory card readers, the kind that plug into a USB port will be the easiest to install. Many retail department stores that sell computer or office supplies also carry flash drives.

Creating the password reset disk

To create a password reset disk, log in to the password-protected administrative account you created. Connect a jump drive to a USB port, or put a spare memory card in a memory card slot. Launch the Password Reset Wizard by going to the Windows Start screen, pressing Windows+W, and typing Password Reset into the search field. Click the Create A Password Reset Disk item. Then follow these steps:

Keep the drive or card in a safe place. If you use a jump drive that you also use for other purposes, make sure you don’t erase the userkey.psw file. That’s the file needed for password recovery.

Using the password reset disk

If you ever need to use the password reset disk to get into the administrative account, first start the computer and click the administrative account for which you created the password reset disk. Take a best guess at the password and press Enter.

If the password is rejected, insert the USB flash drive or memory card you created as a password reset disk. Wait a few seconds for Windows to recognize and register the item. Then click Reset Password under the password hint on the login screen.

Follow the instructions presented by the wizard that opens. You won’t be required to remember the original password. Instead, you create an entirely new password and hint for the account. Use that new password whenever you log in to the account from that point on.

2. Running Programs as Administrator

Most newer programs work with UAC’s privilege escalation on-the-fly. But sometimes a program won’t work, especially with older programs. You can run many programs with administrative privileges by right-clicking its startup icon and choosing Run As Administrator, as in the example shown in Figure 1.

FIGURE 1 Run a program as administrator.

If the option to run the program as an administrator is not available, then one of the following is true:

• The program doesn’t require administrative privileges to run.
• You are already logged into an administrative account.
• The program is always blocked from running with elevated privileges.