I'm trying to help a former client of mine who is somewhat elderly but still runs a small public accounting firm. He has fired his
longtime trusted assistant after, you guessed it, she embezzled funds. She knew much more about computers than him and she was the
network (small network) administrator. I think he has most problems under control but she placed a PW on her PC and it has important
company files on it (in addition to evidence). I've heard of something called "Dream Pack" that is open source and cheap, and which
will allow him to get into the PC and just change the password to whatever he wants and gain access to it. I do not have time to
travel to his little office but I really want to help this old guy. He is like a grandfather type guy and I just want to point him
in the direction of something that will open that computer and perhaps I can walk him through the steps over the phone. Has anybody
heard of this software and can anybody give me any leads on this?

I'm an Excel/Access/Word programmer but I don't know operating system or security stuff. Thanks for any help.
--
RMC,CPA

Re: Dream Pack? Need to get into PC w/PW from fired employee by Steven

Steven
Thu Mar 10 13:02:05 CST 2005

See the link below on a free utility that can be used to reset the local
administrator account on a computer. Note that another option is to place
the hard drive of that computer into another computer as a secondary/slave
drive to access data from another operating system. You may need to take
ownership of the folders/files if you can not access them in another
computer. If the computer was Windows 2000 or XP Pro you may run into
problems if the user encrypted the files with EFS though there "may" be
workarounds. A reinstall of the operating system could make EFS encrypted
files permanently unavailable. --- Steve

http://www.petri.co.il/forgot_administrator_password.htm
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421 --- how to
take ownership for Windows 2000 and XP.


"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
> I'm trying to help a former client of mine who is somewhat elderly but
> still runs a small public accounting firm. He has fired his
> longtime trusted assistant after, you guessed it, she embezzled funds. She
> knew much more about computers than him and she was the
> network (small network) administrator. I think he has most problems under
> control but she placed a PW on her PC and it has important
> company files on it (in addition to evidence). I've heard of something
> called "Dream Pack" that is open source and cheap, and which
> will allow him to get into the PC and just change the password to whatever
> he wants and gain access to it. I do not have time to
> travel to his little office but I really want to help this old guy. He is
> like a grandfather type guy and I just want to point him
> in the direction of something that will open that computer and perhaps I
> can walk him through the steps over the phone. Has anybody
> heard of this software and can anybody give me any leads on this?
>
> I'm an Excel/Access/Word programmer but I don't know operating system or
> security stuff. Thanks for any help.
> --
> RMC,CPA
>
>
>



Re: Dream Pack? Need to get into PC w/PW from fired employee by Phillip

Phillip
Thu Mar 10 13:14:57 CST 2005

How about getting the credentials from her? She is already looking at
"legal problem" involving her future freedom,...thing might go "easier" on
her if she cooperates. The idea that she would withold that information
won't bid well for her in court. It may also be better to let the police
handle it before one of you guys does get into the machine and
"contaminates" the evidence. All she would have to claim is that you guys
went into the machine and got into her stuff and changed it to whatever you
wanted to make here look guilty.

You are better off *not* being able to get into it,..therefore what ever is
there could only have been done by her. Don't slit your own throat by
causing the "evidence" to become questionable in its credebility. Think of
the machine as a "crime scene",...you just don't go stomping through a crime
scene,..that is why they always put up the yellow tape to keep people out.
Picture the machine with yellow tape around it, and let the police
investigators deal with it.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
> I'm trying to help a former client of mine who is somewhat elderly but
still runs a small public accounting firm. He has fired his
> longtime trusted assistant after, you guessed it, she embezzled funds. She
knew much more about computers than him and she was the
> network (small network) administrator. I think he has most problems under
control but she placed a PW on her PC and it has important
> company files on it (in addition to evidence). I've heard of something
called "Dream Pack" that is open source and cheap, and which
> will allow him to get into the PC and just change the password to whatever
he wants and gain access to it. I do not have time to
> travel to his little office but I really want to help this old guy. He is
like a grandfather type guy and I just want to point him
> in the direction of something that will open that computer and perhaps I
can walk him through the steps over the phone. Has anybody
> heard of this software and can anybody give me any leads on this?
>
> I'm an Excel/Access/Word programmer but I don't know operating system or
security stuff. Thanks for any help.
> --
> RMC,CPA
>
>
>



Re: Dream Pack? Need to get into PC w/PW from fired employee by R

R
Thu Mar 10 14:45:11 CST 2005

Thanks Phillip,
I only know what I'm told, which is of course not the whole story. I do know that she has actually refused to give up her
passwords and she has given lame excuses for that. I know that speaking from the point of view of an accountant during tax and audit
season, and knowing what the guy has told me, his interest is not creating a big legal tangleweb for which the PC becomes "frozen"
because of its evidentiary value. He wants the files and he wants to be able to use the PC and he wants it now. Whatever legal
issues there are come second to getting that data right away so he can service his clients. I don't throw out a bunch of advice
because he is still of sound mind and he doesn't want to be treated like an incompetent old man, and it is after all, his business,
both literally and figuratively. So, I'm just trying to help him get into that computer as painlessly as possible because he trusts
me and he needs the help. I know some people who are big-time business network professionals and who specialize in public
accounting, but sending those guys in would cost a fortune. Hopefully he can just get his data and get down the road. Hopefully.
--
RMC,CPA


"Phillip Windell" <@.> wrote in message news:OaF7zVaJFHA.1176@TK2MSFTNGP15.phx.gbl...
How about getting the credentials from her? She is already looking at
"legal problem" involving her future freedom,...thing might go "easier" on
her if she cooperates. The idea that she would withold that information
won't bid well for her in court. It may also be better to let the police
handle it before one of you guys does get into the machine and
"contaminates" the evidence. All she would have to claim is that you guys
went into the machine and got into her stuff and changed it to whatever you
wanted to make here look guilty.

You are better off *not* being able to get into it,..therefore what ever is
there could only have been done by her. Don't slit your own throat by
causing the "evidence" to become questionable in its credebility. Think of
the machine as a "crime scene",...you just don't go stomping through a crime
scene,..that is why they always put up the yellow tape to keep people out.
Picture the machine with yellow tape around it, and let the police
investigators deal with it.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
> I'm trying to help a former client of mine who is somewhat elderly but
still runs a small public accounting firm. He has fired his
> longtime trusted assistant after, you guessed it, she embezzled funds. She
knew much more about computers than him and she was the
> network (small network) administrator. I think he has most problems under
control but she placed a PW on her PC and it has important
> company files on it (in addition to evidence). I've heard of something
called "Dream Pack" that is open source and cheap, and which
> will allow him to get into the PC and just change the password to whatever
he wants and gain access to it. I do not have time to
> travel to his little office but I really want to help this old guy. He is
like a grandfather type guy and I just want to point him
> in the direction of something that will open that computer and perhaps I
can walk him through the steps over the phone. Has anybody
> heard of this software and can anybody give me any leads on this?
>
> I'm an Excel/Access/Word programmer but I don't know operating system or
security stuff. Thanks for any help.
> --
> RMC,CPA
>
>
>




Re: Dream Pack? Need to get into PC w/PW from fired employee by R

R
Thu Mar 10 15:01:34 CST 2005

Thanks Steve,

This looks like a very good possibility for his problem. Hopefully all of this will help save me a 2 or 3 day out of towner with
about 12 total hours of driving and most of the rest of the time sitting on my butt in a tiny town in a tiny CPA office doing things
that are not my forte in the first place.

Thanks again!
--
RMC,CPA


"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message news:uWMkDOaJFHA.2576@TK2MSFTNGP15.phx.gbl...
See the link below on a free utility that can be used to reset the local
administrator account on a computer. Note that another option is to place
the hard drive of that computer into another computer as a secondary/slave
drive to access data from another operating system. You may need to take
ownership of the folders/files if you can not access them in another
computer. If the computer was Windows 2000 or XP Pro you may run into
problems if the user encrypted the files with EFS though there "may" be
workarounds. A reinstall of the operating system could make EFS encrypted
files permanently unavailable. --- Steve

http://www.petri.co.il/forgot_administrator_password.htm
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421 --- how to
take ownership for Windows 2000 and XP.


"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
> I'm trying to help a former client of mine who is somewhat elderly but
> still runs a small public accounting firm. He has fired his
> longtime trusted assistant after, you guessed it, she embezzled funds. She
> knew much more about computers than him and she was the
> network (small network) administrator. I think he has most problems under
> control but she placed a PW on her PC and it has important
> company files on it (in addition to evidence). I've heard of something
> called "Dream Pack" that is open source and cheap, and which
> will allow him to get into the PC and just change the password to whatever
> he wants and gain access to it. I do not have time to
> travel to his little office but I really want to help this old guy. He is
> like a grandfather type guy and I just want to point him
> in the direction of something that will open that computer and perhaps I
> can walk him through the steps over the phone. Has anybody
> heard of this software and can anybody give me any leads on this?
>
> I'm an Excel/Access/Word programmer but I don't know operating system or
> security stuff. Thanks for any help.
> --
> RMC,CPA
>
>
>




Re: Dream Pack? Need to get into PC w/PW from fired employee by Phillip

Phillip
Thu Mar 10 15:41:10 CST 2005

I still think the machine just needs turned over to the police. Perhaps
telling this woman that this will be done will "encourage" her to give the
credentials in order to avoid this. She either gives the credentials,..or
the machine goes to the police,...a simple choice.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:uZl1ZRbJFHA.2576@TK2MSFTNGP15.phx.gbl...
> Thanks Steve,
>
> This looks like a very good possibility for his problem. Hopefully all of
this will help save me a 2 or 3 day out of towner with
> about 12 total hours of driving and most of the rest of the time sitting
on my butt in a tiny town in a tiny CPA office doing things
> that are not my forte in the first place.
>
> Thanks again!
> --
> RMC,CPA
>
>
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:uWMkDOaJFHA.2576@TK2MSFTNGP15.phx.gbl...
> See the link below on a free utility that can be used to reset the local
> administrator account on a computer. Note that another option is to place
> the hard drive of that computer into another computer as a secondary/slave
> drive to access data from another operating system. You may need to take
> ownership of the folders/files if you can not access them in another
> computer. If the computer was Windows 2000 or XP Pro you may run into
> problems if the user encrypted the files with EFS though there "may" be
> workarounds. A reinstall of the operating system could make EFS encrypted
> files permanently unavailable. --- Steve
>
> http://www.petri.co.il/forgot_administrator_password.htm
> http://support.microsoft.com/default.aspx?scid=kb;en-us;308421 --- how to
> take ownership for Windows 2000 and XP.
>
>
> "R. Choate" <rchoatecpa@NoSpam.com> wrote in message
> news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
> > I'm trying to help a former client of mine who is somewhat elderly but
> > still runs a small public accounting firm. He has fired his
> > longtime trusted assistant after, you guessed it, she embezzled funds.
She
> > knew much more about computers than him and she was the
> > network (small network) administrator. I think he has most problems
under
> > control but she placed a PW on her PC and it has important
> > company files on it (in addition to evidence). I've heard of something
> > called "Dream Pack" that is open source and cheap, and which
> > will allow him to get into the PC and just change the password to
whatever
> > he wants and gain access to it. I do not have time to
> > travel to his little office but I really want to help this old guy. He
is
> > like a grandfather type guy and I just want to point him
> > in the direction of something that will open that computer and perhaps I
> > can walk him through the steps over the phone. Has anybody
> > heard of this software and can anybody give me any leads on this?
> >
> > I'm an Excel/Access/Word programmer but I don't know operating system or
> > security stuff. Thanks for any help.
> > --
> > RMC,CPA
> >
> >
> >
>
>
>



Re: Dream Pack? Need to get into PC w/PW from fired employee by Steven

Steven
Thu Mar 10 17:05:48 CST 2005

If it all possible try whatever program you are going to use on a test or
spare computer so that you know exactly how the program works. The website
for the utility has some pretty good step by step instructions but can still
be confusing to many such as if you need to select which partition the
operating system is installed on. There are more user friendly programs that
can also do such but are not free. The link below is to a very popular one
that can be downloaded. --- Steve

http://www.winternals.com/products/repairandrecovery/locksmith.asp
http://www.winternals.com/products/repairandrecovery/erdcommander2002.asp?pid=erd
--- currently $149 for single workstation.

"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:uZl1ZRbJFHA.2576@TK2MSFTNGP15.phx.gbl...
> Thanks Steve,
>
> This looks like a very good possibility for his problem. Hopefully all of
> this will help save me a 2 or 3 day out of towner with
> about 12 total hours of driving and most of the rest of the time sitting
> on my butt in a tiny town in a tiny CPA office doing things
> that are not my forte in the first place.
>
> Thanks again!
> --
> RMC,CPA
>
>
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
> news:uWMkDOaJFHA.2576@TK2MSFTNGP15.phx.gbl...
> See the link below on a free utility that can be used to reset the local
> administrator account on a computer. Note that another option is to place
> the hard drive of that computer into another computer as a secondary/slave
> drive to access data from another operating system. You may need to take
> ownership of the folders/files if you can not access them in another
> computer. If the computer was Windows 2000 or XP Pro you may run into
> problems if the user encrypted the files with EFS though there "may" be
> workarounds. A reinstall of the operating system could make EFS encrypted
> files permanently unavailable. --- Steve
>
> http://www.petri.co.il/forgot_administrator_password.htm
> http://support.microsoft.com/default.aspx?scid=kb;en-us;308421 --- how to
> take ownership for Windows 2000 and XP.
>
>
> "R. Choate" <rchoatecpa@NoSpam.com> wrote in message
> news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
>> I'm trying to help a former client of mine who is somewhat elderly but
>> still runs a small public accounting firm. He has fired his
>> longtime trusted assistant after, you guessed it, she embezzled funds.
>> She
>> knew much more about computers than him and she was the
>> network (small network) administrator. I think he has most problems under
>> control but she placed a PW on her PC and it has important
>> company files on it (in addition to evidence). I've heard of something
>> called "Dream Pack" that is open source and cheap, and which
>> will allow him to get into the PC and just change the password to
>> whatever
>> he wants and gain access to it. I do not have time to
>> travel to his little office but I really want to help this old guy. He is
>> like a grandfather type guy and I just want to point him
>> in the direction of something that will open that computer and perhaps I
>> can walk him through the steps over the phone. Has anybody
>> heard of this software and can anybody give me any leads on this?
>>
>> I'm an Excel/Access/Word programmer but I don't know operating system or
>> security stuff. Thanks for any help.
>> --
>> RMC,CPA
>>
>>
>>
>
>
>



Re: Dream Pack? Need to get into PC w/PW from fired employee by Malke

Malke
Thu Mar 10 19:19:04 CST 2005

R. Choate wrote:

> Thanks Phillip,
> I only know what I'm told, which is of course not the whole story.
> I do know that she has actually refused to give up her
> passwords and she has given lame excuses for that. I know that
> speaking from the point of view of an accountant during tax and audit
> season, and knowing what the guy has told me, his interest is not
> creating a big legal tangleweb for which the PC becomes "frozen"
> because of its evidentiary value. He wants the files and he wants to
> be able to use the PC and he wants it now. Whatever legal issues there
> are come second to getting that data right away so he can service his
> clients. I don't throw out a bunch of advice because he is still of
> sound mind and he doesn't want to be treated like an incompetent old
> man, and it is after all, his business, both literally and
> figuratively. So, I'm just trying to help him get into that computer
> as painlessly as possible because he trusts me and he needs the help.
> I know some people who are big-time business network professionals and
> who specialize in public accounting, but sending those guys in would
> cost a fortune. Hopefully he can just get his data and get down the
> road. Hopefully.

Here's a suggestion - image the drive with something like Ghost or
TrueImage and burn to cd-r. Then you'll have it if needed as evidence.
Then use ntpasswd to change the Administrator password to a blank.
Ntpasswd is free and easy to use; just read the How-To.

http://home.eunet.no/~pnordahl/ntpasswd/

Malke
--
MS MVP - Windows Shell/User
www.elephantboycomputers.com
In Memoriam - MVP Alex Nichol
The world is diminished without him.

Re: Dream Pack? Need to get into PC w/PW from fired employee by Roland

Roland
Thu Mar 10 22:56:48 CST 2005

"R. Choate" wrote in message news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
: I'm trying to help a former client of mine who is somewhat elderly but
still runs a small public accounting firm. He has fired his
: longtime trusted assistant after, you guessed it, she embezzled funds. She
knew much more about computers than him and she was the
: network (small network) administrator. I think he has most problems under
control but she placed a PW on her PC and it has important
: company files on it (in addition to evidence). I've heard of something
called "Dream Pack" that is open source and cheap, and which
: will allow him to get into the PC and just change the password to whatever
he wants and gain access to it. I do not have time to
: travel to his little office but I really want to help this old guy. He is
like a grandfather type guy and I just want to point him
: in the direction of something that will open that computer and perhaps I
can walk him through the steps over the phone. Has anybody
: heard of this software and can anybody give me any leads on this?
:
: I'm an Excel/Access/Word programmer but I don't know operating system or
security stuff. Thanks for any help.

I don't know what's wrong with the people in this NG but giving someone
advice regarding evidence to a crime is a criminal offense.

There are flaws to everything suggested except for Phillip's.

1. A copy is a copy and not an original, even ghosted. Copies are not valid
evidence.
2. A civilian can file a civil suit. A state files a criminal suit.
Interfering with an investigation and/or tampering with evidence is a crime.
His civilian interests do not take priority over criminal evidence. He
doesn't get to decide if he wants to pursue it. An attorney should be
consulted and the authorities should be notified immediately.
3. Failing to report a crime, is a crime.
4. The guy is a CPA. He is required to keep physical records.
5. If this involves more than $2000 it is a federal offense.
6. If any of this involved communications over the Internet, the FCC might
want to file some charges of their own, i.e. wire fraud.
7. Involving yourself in this can put yourself in trouble with the law. If
you're a CPA, you're not technically capable and you're interfering with
evidence.
8. Would you want an ignorant person to handle your finances? Then what
makes you think he wants and ignorant person working on his computer?
9. If the evidence is compromised, the ex-employee can sue for wrongful
dismissal. Are you sitting down? She can sue everyone involved, even after
the fact. You don't know for sure who this guy is or even if this ever took
place. For all we know, Mr. CPA could be a thief who stole the lil ole
guy's computer. I'm not judging because I have no way of knowing one way or
the other. What you don't know CAN hurt you.
10. Anyone not familiar with forensics should never be involve themselves in
a criminal investigation re: evidence.

My only advice to the victim, if true, would be as Phillip has suggested.
Call the authorities and I would add, call an attorney. Doing anything else
is just stupid and putting yourself, your property and your liberty at risk.

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;291382



Re: Dream Pack? Need to get into PC w/PW from fired employee by Phillip

Phillip
Fri Mar 11 08:39:04 CST 2005

You'd better listen to what I said. As Roland reinforced my point,...You
are dealing with a crime seen,...if you know what is good for you and for
your frien keeping his license to practice being a CPA,..you will turn over
the PC to the police "as it is" without screwing around with it or tampering
with it. The are no "games" being played here,..you'd better take it
seriously.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:uTfWPIbJFHA.2396@TK2MSFTNGP10.phx.gbl...
> Thanks Phillip,
> I only know what I'm told, which is of course not the whole story. I
do know that she has actually refused to give up her
> passwords and she has given lame excuses for that. I know that speaking
from the point of view of an accountant during tax and audit
> season, and knowing what the guy has told me, his interest is not creating
a big legal tangleweb for which the PC becomes "frozen"
> because of its evidentiary value. He wants the files and he wants to be
able to use the PC and he wants it now. Whatever legal
> issues there are come second to getting that data right away so he can
service his clients. I don't throw out a bunch of advice
> because he is still of sound mind and he doesn't want to be treated like
an incompetent old man, and it is after all, his business,
> both literally and figuratively. So, I'm just trying to help him get into
that computer as painlessly as possible because he trusts
> me and he needs the help. I know some people who are big-time business
network professionals and who specialize in public
> accounting, but sending those guys in would cost a fortune. Hopefully he
can just get his data and get down the road. Hopefully.
> --
> RMC,CPA
>
>
> "Phillip Windell" <@.> wrote in message
news:OaF7zVaJFHA.1176@TK2MSFTNGP15.phx.gbl...
> How about getting the credentials from her? She is already looking at
> "legal problem" involving her future freedom,...thing might go "easier" on
> her if she cooperates. The idea that she would withold that information
> won't bid well for her in court. It may also be better to let the police
> handle it before one of you guys does get into the machine and
> "contaminates" the evidence. All she would have to claim is that you guys
> went into the machine and got into her stuff and changed it to whatever
you
> wanted to make here look guilty.
>
> You are better off *not* being able to get into it,..therefore what ever
is
> there could only have been done by her. Don't slit your own throat by
> causing the "evidence" to become questionable in its credebility. Think of
> the machine as a "crime scene",...you just don't go stomping through a
crime
> scene,..that is why they always put up the yellow tape to keep people out.
> Picture the machine with yellow tape around it, and let the police
> investigators deal with it.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
> "R. Choate" <rchoatecpa@NoSpam.com> wrote in message
> news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
> > I'm trying to help a former client of mine who is somewhat elderly but
> still runs a small public accounting firm. He has fired his
> > longtime trusted assistant after, you guessed it, she embezzled funds.
She
> knew much more about computers than him and she was the
> > network (small network) administrator. I think he has most problems
under
> control but she placed a PW on her PC and it has important
> > company files on it (in addition to evidence). I've heard of something
> called "Dream Pack" that is open source and cheap, and which
> > will allow him to get into the PC and just change the password to
whatever
> he wants and gain access to it. I do not have time to
> > travel to his little office but I really want to help this old guy. He
is
> like a grandfather type guy and I just want to point him
> > in the direction of something that will open that computer and perhaps I
> can walk him through the steps over the phone. Has anybody
> > heard of this software and can anybody give me any leads on this?
> >
> > I'm an Excel/Access/Word programmer but I don't know operating system or
> security stuff. Thanks for any help.
> > --
> > RMC,CPA
> >
> >
> >
>
>
>



Re: Dream Pack? Need to get into PC w/PW from fired employee by R

R
Fri Mar 11 10:59:39 CST 2005

Many thanks to Steven, Phillip, Malke, and Roland. I'll try to briefly respond to some of the comments/suggestions. As to the
comment that I don't really know who I'm dealing with, I would disagree with that and say that I really do know the guy fairly well
and have known him for a number of years. He has been a CPA since 1952 and his ethics are exemplary. I'm sure we all know that many
crimes go unreported just because the victim needs to get down the road and put the loss behind them. If a CPA in public practice in
a small town allows it to be known that he had a bad employee who monkeyed around with one of the firm's computers, this could cause
a panic for all of his clients. If all she did is hassle him by not giving him the PW or telling him she forgot it, it may not be
worth the problems of reporting anything. The point is well taken that she could sue for wrongful termination, but I know enough
from all of the lawyers in my family that even a great employee who was fired for the flimsiest of reasons has a very poor chance of
prevailing in a wrongful termination suit, especially if it could come out that she was not a good employee. Even a decent
litigation attorney can establish that without any evidence of the type we have discussed here. Every day in this state and all
across the country, bank and brokerage employees are fired because they stole money and that is the end of it even though they
committed a crime. Right or wrong, the victim does get to choose what happens in many, if not most, white collar crimes. Your points
are well taken and I understand what you are saying. However, I just have to say that in a small town in Texas, an established, well
known, and popular CPA, who has been part of the local landscape for more than half a century, is not going to lose his license or
be "brought down" by a bitter woman who decided along the way that she was the important one. It's just not going to happen. Not in
that town.

As to my involvement and my own risk of losing my CPA license, that is not going to happen either. That man needs all of his files
to service his clients during the accounting "busy season", which is right now. Although the point about my lack of knowledge is
fair, lets not go too far on that. Although I am a CPA, my practice is focused on programming in VBA for Excel, Access database, and
the rest of the MS Office suite for financial professionals. I won't be doing anything that places me at risk, that is for sure.
We're not dealing with some sophisticated criminal here, just a bitter, controlling, old hag who began to think she was the boss, so
she got her ass fired. His position is "screw the 'crime scene', I want my files and I want them now, and I want that PC to be
functional again so the new employee can use it". In a small town in Texas where this all occurred, this woman can't do anything
further to the guy. She's done. Maybe in Dallas or New York or L.A., things would be different, but not in small town, Texas.

Finally, I do appreciate the pointers to all of the various PW cracking and similar apps that he can use. I think he will now be
able to get his work product files and get the problem PC back in action by Monday thanks to your help and thanks to some of the
apps I already have a working knowledge of. This newsgroup is certainly a lot different than the ones I usually deal with (Excel
programming, Access misc. forums, AS400 programming, etc.). I'm glad you guys are here; computer and electronic data security
becomes more critical every day. I've got to spend more time learning from you by monitoring this forum. I know the time spent will
help with my primary work.

Thanks again to Steven, Phillip, Malke, and Roland. I sincerely appreciate your thoughts and your time.

--
RMC,CPA


"R. Choate" <rchoatecpa@NoSpam.com> wrote in message news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
I'm trying to help a former client of mine who is somewhat elderly but still runs a small public accounting firm. He has fired his
longtime trusted assistant after, you guessed it, she embezzled funds. She knew much more about computers than him and she was the
network (small network) administrator. I think he has most problems under control but she placed a PW on her PC and it has important
company files on it (in addition to evidence). I've heard of something called "Dream Pack" that is open source and cheap, and which
will allow him to get into the PC and just change the password to whatever he wants and gain access to it. I do not have time to
travel to his little office but I really want to help this old guy. He is like a grandfather type guy and I just want to point him
in the direction of something that will open that computer and perhaps I can walk him through the steps over the phone. Has anybody
heard of this software and can anybody give me any leads on this?

I'm an Excel/Access/Word programmer but I don't know operating system or security stuff. Thanks for any help.
--
RMC,CPA





Re: Dream Pack? Need to get into PC w/PW from fired employee by Roland

Roland
Fri Mar 11 11:08:07 CST 2005

"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:%23zhW5ulJFHA.3928@TK2MSFTNGP09.phx.gbl...
However, I just have to say that in a small town in Texas, an established,
well
: known, and popular CPA, who has been part of the local landscape for more
than half a century, is not going to lose his license or
: be "brought down" by a bitter woman who decided along the way that she was
the important one. It's just not going to happen. Not in
: that town.

Well, why didn't you say it was in Texas. Hell, just string her up at the
nearest tree and head to lunch. Women in the workplace...I mean...really.
What was she doing out of the kitchen? (O:=

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;291382



Re: Dream Pack? Need to get into PC w/PW from fired employee by R

R
Fri Mar 11 11:33:27 CST 2005

There is no need make those kind of comments. I'm only stating the reality of the situation. I made no improper comments about women
in the workplace and the situation I posted is not a statement of my personal views. I don't live in that place and I wouldn't want
to. I don't like the way things are done in some of these towns where it really is almost like a wild west situation sometimes. The
woman did need to be fired. She should have been fired 5 years ago. I've dealt with her and I know first hand that she considered
herself to be the only truly competent person in the company. I suppose she must have felt she was due the same compensation as a
partner and she took some cash from the till. There is no reason to make such biting, sarcastic comments to me. My original post
only asked for help finding the software that he can use to get things back in working order again. I did not make any insulting or
mean spirited comments in my post or in my follow-up posts. I indicated that I appreciate the advice and I thanked you. I didn't see
any need to take further time in the forum since I received the help I needed. Also, I'm only trying to help someone else. Please
don't take shots at me.
--
RMC,CPA


"Roland Hall" <nobody@nowhere> wrote in message news:OJhbmzlJFHA.3916@TK2MSFTNGP14.phx.gbl...
"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:%23zhW5ulJFHA.3928@TK2MSFTNGP09.phx.gbl...
However, I just have to say that in a small town in Texas, an established,
well
: known, and popular CPA, who has been part of the local landscape for more
than half a century, is not going to lose his license or
: be "brought down" by a bitter woman who decided along the way that she was
the important one. It's just not going to happen. Not in
: that town.

Well, why didn't you say it was in Texas. Hell, just string her up at the
nearest tree and head to lunch. Women in the workplace...I mean...really.
What was she doing out of the kitchen? (O:=

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;291382




Re: Dream Pack? Need to get into PC w/PW from fired employee by Phillip

Phillip
Fri Mar 11 12:08:10 CST 2005

"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:%23S3VyBmJFHA.2132@TK2MSFTNGP14.phx.gbl...
> There is no need make those kind of comments. I'm only stating the reality
of the
> situation. I made no improper comments about women

Don't take those comments so serously. You'll go insane in this group if
you do. I once reminded Roland before going to a redeo that the bull is
supposed to go on the bottom,...if he took me too seroiusly he would have
been upset that I took all the fun out of riding with the bull on top.

...and then there was that thing about the blondes with their legs caught in
the steering trying to dim the headlights...hmm....

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com





Re: Dream Pack? Need to get into PC w/PW from fired employee by Steven

Steven
Fri Mar 11 13:00:25 CST 2005

I understand exactly what you are saying. Being in management for over
thirty years with half of that time self employed I fired many employees for
theft of funds or property. Rarely were the police involved and they don't
want to be involved unless it is a major case. Generally we wanted to get
rid of the individual and get on with business. Rarely did anyone get more
than a modest amount before our controls exposed them. It is expensive to
make a major production out of prosecuting someone and does not make sense
to spend thousands of dollars [days in court, gathering evidence, filling
out reports, talking to witnesses, legal advise, and maybe even a private
investigator] for a small loss on someone that is not going to get in that
much trouble anyhow. Having lawyers in my family they would handle such a
case for unlawful dismissal in two ways. Either the ex employee shows up
with a BIG bag of money in advance to pay them with no guarantee of results
or the lawyer takes the case based on extreme wrongdoing with much evidence
including past like practices for an employer with very deep pockets in a
county where there will almost surely be a sympathetic jury for a third of
the settlement. All of that is extremely rare and when it happens of course
everyone in the country hears about it making many think this is an everyday
occurrence for most employers. In the majority of lawsuits the lawyers are
the winners and everyone else walks away with a net loss which people are
finally catching onto. I wish you luck helping your friend. You sound like
the kind of friend we all value. --- Steve



"R. Choate" <rchoatecpa@NoSpam.com> wrote in message
news:%23zhW5ulJFHA.3928@TK2MSFTNGP09.phx.gbl...
> Many thanks to Steven, Phillip, Malke, and Roland. I'll try to briefly
> respond to some of the comments/suggestions. As to the
> comment that I don't really know who I'm dealing with, I would disagree
> with that and say that I really do know the guy fairly well
> and have known him for a number of years. He has been a CPA since 1952 and
> his ethics are exemplary. I'm sure we all know that many
> crimes go unreported just because the victim needs to get down the road
> and put the loss behind them. If a CPA in public practice in
> a small town allows it to be known that he had a bad employee who monkeyed
> around with one of the firm's computers, this could cause
> a panic for all of his clients. If all she did is hassle him by not giving
> him the PW or telling him she forgot it, it may not be
> worth the problems of reporting anything. The point is well taken that she
> could sue for wrongful termination, but I know enough
> from all of the lawyers in my family that even a great employee who was
> fired for the flimsiest of reasons has a very poor chance of
> prevailing in a wrongful termination suit, especially if it could come out
> that she was not a good employee. Even a decent
> litigation attorney can establish that without any evidence of the type we
> have discussed here. Every day in this state and all
> across the country, bank and brokerage employees are fired because they
> stole money and that is the end of it even though they
> committed a crime. Right or wrong, the victim does get to choose what
> happens in many, if not most, white collar crimes. Your points
> are well taken and I understand what you are saying. However, I just have
> to say that in a small town in Texas, an established, well
> known, and popular CPA, who has been part of the local landscape for more
> than half a century, is not going to lose his license or
> be "brought down" by a bitter woman who decided along the way that she was
> the important one. It's just not going to happen. Not in
> that town.
>
> As to my involvement and my own risk of losing my CPA license, that is not
> going to happen either. That man needs all of his files
> to service his clients during the accounting "busy season", which is right
> now. Although the point about my lack of knowledge is
> fair, lets not go too far on that. Although I am a CPA, my practice is
> focused on programming in VBA for Excel, Access database, and
> the rest of the MS Office suite for financial professionals. I won't be
> doing anything that places me at risk, that is for sure.
> We're not dealing with some sophisticated criminal here, just a bitter,
> controlling, old hag who began to think she was the boss, so
> she got her ass fired. His position is "screw the 'crime scene', I want my
> files and I want them now, and I want that PC to be
> functional again so the new employee can use it". In a small town in Texas
> where this all occurred, this woman can't do anything
> further to the guy. She's done. Maybe in Dallas or New York or L.A.,
> things would be different, but not in small town, Texas.
>
> Finally, I do appreciate the pointers to all of the various PW cracking
> and similar apps that he can use. I think he will now be
> able to get his work product files and get the problem PC back in action
> by Monday thanks to your help and thanks to some of the
> apps I already have a working knowledge of. This newsgroup is certainly a
> lot different than the ones I usually deal with (Excel
> programming, Access misc. forums, AS400 programming, etc.). I'm glad you
> guys are here; computer and electronic data security
> becomes more critical every day. I've got to spend more time learning from
> you by monitoring this forum. I know the time spent will
> help with my primary work.
>
> Thanks again to Steven, Phillip, Malke, and Roland. I sincerely appreciate
> your thoughts and your time.
>
> --
> RMC,CPA
>
>
> "R. Choate" <rchoatecpa@NoSpam.com> wrote in message
> news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
> I'm trying to help a former client of mine who is somewhat elderly but
> still runs a small public accounting firm. He has fired his
> longtime trusted assistant after, you guessed it, she embezzled funds. She
> knew much more about computers than him and she was the
> network (small network) administrator. I think he has most problems under
> control but she placed a PW on her PC and it has important
> company files on it (in addition to evidence). I've heard of something
> called "Dream Pack" that is open source and cheap, and which
> will allow him to get into the PC and just change the password to whatever
> he wants and gain access to it. I do not have time to
> travel to his little office but I really want to help this old guy. He is
> like a grandfather type guy and I just want to point him
> in the direction of something that will open that computer and perhaps I
> can walk him through the steps over the phone. Has anybody
> heard of this software and can anybody give me any leads on this?
>
> I'm an Excel/Access/Word programmer but I don't know operating system or
> security stuff. Thanks for any help.
> --
> RMC,CPA
>
>
>
>



Re: Dream Pack? Need to get into PC w/PW from fired employee by Roland

Roland
Fri Mar 11 13:23:47 CST 2005

"R. Choate" wrote in message news:%23S3VyBmJFHA.2132@TK2MSFTNGP14.phx.gbl...

Ok, now I will respond to you, rather than to those that offered advice.

: There is no need make those kind of comments. I'm only stating the reality
of the situation. I made no improper comments about women
: in the workplace and the situation I posted is not a statement of my
personal views.

Nobody said you made statements about women in the workplace.

: I don't live in that place and I wouldn't want to.

That's a personal statement. You are stating opinion. However, you have
not stated exactly where that place is so there can be no opposing view.

: I don't like the way things are done in some of these towns where it
really is almost like a wild west situation sometimes.

Another personal statement and a stereo-type statement re: small Texas
towns.

: The woman did need to be fired.

Another personal statement without supporting evidence. This is your
opinion. It has no facts so it carries no weight on this end. However, if
it is true that she did steal from her employer, the authorities should be
notified.

: She should have been fired 5 years ago.

Another person statement without supporting evidence. This must be your
opinion.

: I've dealt with her and I know first hand that she considered
: herself to be the only truly competent person in the company.

You know or it is your opinion based on your feelings? Perhaps she was the
only competent person in the company?! How does that qualify her being
fired, in your opinion?

Did she state to you, "I am the only truly competent person in the company?"
If not, then you did not know or you have not shown supporting evidence to
qualify your position. This is a personal opinion (statement).

: I suppose she must have felt she was due the same compensation as a
: partner and she took some cash from the till.

Accusations and drawing a conclusion without supporting evidence. Did you
see her take cash from the till? If not, were you told? If so, that's
hearsay. Making statements as fact, based on hearsay, without supporting
evidence, that damage someone's reputation is called libel.
http://hyperdictionary.com/search.aspx?define=libel A libel is defined as a
tort. Most people don't know what a tort is:
http://hyperdictionary.com/search.aspx?define=tort That's probably worse
than telling a joke. Is there really a till or is that a metaphor?

: There is no reason to make such biting, sarcastic comments to me.

You took my response out of context and gave weight to a meaning which was
not present nor intended. And since R. Choate is not clear re: your gender,
unless you're a woman, how would you feel this is directed towards you?

: My original post
: only asked for help finding the software that he can use to get things
back in working order again.

And, while that appears to be innocent on the surface, we know nothing about
you. We only know you as you portray yourself. This is not to imply one
way or the other. While I do not judge this to be true nor false, I do not
offer information where the request is in clear violation of the law,
however unintentional, without regard to your intention. A crime has been
committed, based on your OP. Doing anything with the computer in question,
before turning it over to the police, is tampering with evidence. It is a
criminal offense punishable by a fine and/or imprisonment. I cannot be more
clear on that. You don't have to take my word for it. Discuss it with an
attorney familiar with laws regarding computer crimes. Just by turning it
on you are tampering with it. Depending on the OS, certain services run,
files are modified, logs are written to, etc.

Also, something that I forgot to work into my original post, while setting a
password on a computer, in itself, is not unreasonable nor illegal. Doing
so intentionally to bring harm to a business or person, is illegal. This is
another reason to get the authorties involved.

: I did not make any insulting or
: mean spirited comments in my post or in my follow-up posts.

Nor did I. My comments were meant to be humorous and they could only be
somewhat offensive to women, particularly the one in question. They were
not directed towards you yet you chose to take offense. Honestly I feel
that is partly, if not mostly, because of my previous post which was
probably not only something you didn't expect but was in contrary to your
stated view. It appears you felt I was implying something which if you have
ever read any of my posts, I'm very direct and I often include humor.

: I indicated that I appreciate the advice and I thanked you. I didn't see
: any need to take further time in the forum since I received the help I
needed.

You have chosen to continue as you are not required to respond to any post.
It's called free will. Luckily, at least in the US, we are all free to make
that choice. If you had everything you requried, why did you return and
continue to read more posts? Surely you do not feel you were forced to do
so?!

: Also, I'm only trying to help someone else.

I am unable to come to that conclusion as I am unable to determine if your
OP was based on honesty or deception. We get a lot of kids in here trying
to get us to do their homework. Some are disguised better than others.
Some are blatant. Spammers come in here and learn so they can then spam us.
There are downsides to offering information for free.

I chose not to give weight to your motives either way but to state my views
on providing the information you requested so as to help protect those that
might offer advice, thus putting themselves at risk. It is not a risk I am
willing to take even though one of my sites has a document detailing
step-by-step how to accomplish what you're trying to achieve in an AD
(Active Directory) environment because the suggestions you received will not
work in you're in a domain. They only work against the local domain.

: Please
: don't take shots at me.

None were taken. I'm am sorry you took offense to my humor. Steve Martin
said, "Comedy is not pretty." If I have offended you then I must apologize
as that was never my intent. I was shocked to see people offering advice to
your original post which I why my OP was actually directed more at them than
you.

I am not an attorney but I have extensive knowledge in computer forensics
and criminal investigations re: same. With all due respect to your
colleague, excluding yourself from involvement in this issue, would be in
your best interest. That is my opinion. Whatever you decide to do, please
be careful and consider the risks. While you should never rely on just one
opinion, it is better to seek advice from professionals. Discussing this
with an attorney, familiar with this type of offense, would be beneficial.

While this response may not bring you solace, I have removed the humor. You
are also not required to respond to this post, nor should you feel obligated
to do so. Hopefully, if you do read it, you will take it in the spirit in
which it was given, complete honesty for your benefit to protect yourself.
I do not wish to see anyone, known or unknown, fall into a crack in the
system, especially when their intended motive is to help someone else.

Good luck.

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;291382



Re: Dream Pack? Need to get into PC w/PW from fired employee by Roland

Roland
Fri Mar 11 13:30:49 CST 2005

"Phillip Windell" <@.> wrote in message
news:uaBNKVmJFHA.1996@TK2MSFTNGP12.phx.gbl...
: "R. Choate" <rchoatecpa@NoSpam.com> wrote in message
: news:%23S3VyBmJFHA.2132@TK2MSFTNGP14.phx.gbl...
: > There is no need make those kind of comments. I'm only stating the
reality
: of the
: > situation. I made no improper comments about women
:
: Don't take those comments so serously. You'll go insane in this group if
: you do. I once reminded Roland before going to a redeo that the bull is
: supposed to go on the bottom,...if he took me too seroiusly he would have
: been upset that I took all the fun out of riding with the bull on top.

As I prefer to BE the bull on top. As in CaddyShack, "be the bull."

: ...and then there was that thing about the blondes with their legs caught
in
: the steering trying to dim the headlights...hmm....

Well, I think I am in the lead this week Phillip. You must be taking it
easy.

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;291382



Re: Dream Pack? Need to get into PC w/PW from fired employee by jeff

jeff
Fri Mar 11 23:23:39 CST 2005

On Thu, 10 Mar 2005 12:35:53 -0600, "R. Choate"
<rchoatecpa@NoSpam.com> wrote:

>I'm trying to help a former client of mine who is somewhat elderly but still runs a small public accounting firm. He has fired his
>longtime trusted assistant after, you guessed it, she embezzled funds. She knew much more about computers than him and she was the
>network (small network) administrator. I think he has most problems under control but she placed a PW on her PC and it has important
>company files on it (in addition to evidence). I've heard of something called "Dream Pack" that is open source and cheap, and which
>will allow him to get into the PC and just change the password to whatever he wants and gain access to it. I do not have time to
>travel to his little office but I really want to help this old guy. He is like a grandfather type guy and I just want to point him
>in the direction of something that will open that computer and perhaps I can walk him through the steps over the phone. Has anybody
>heard of this software and can anybody give me any leads on this?
>
>I'm an Excel/Access/Word programmer but I don't know operating system or security stuff. Thanks for any help.

If it actually has "evidence" then you don't do anything. You hand
the system over to the investigators.

Jeff

Re: Dream Pack? Need to get into PC w/PW from fired employee by R

R
Sat Mar 12 11:01:46 CST 2005

Look, I should never have mentioned the word "evidence" or even told the summary of the situation. I should simply have asked for
advice on programs which get past passwords. I already know of several but I wanted to give the best list I could and find the
simplest route from point A to point B. My friend already knows what he lost and he has accepted it. He is not going to waste his
time dealing with prosecution for the reasons spelled out perfectly by Steven. I don't understand why people here don't get it.
Whether it is right or wrong in your view, and whether it is technically a crime to not call the police on a matter where at the end
of the day nothing meaningful happens except for costing the victim even MORE money and lost time in the interest of punishing
somebody who probably won't end up getting much, if any, punishment, and the money that is gone will not come back. This is the real
world. Even if you called the police on a deal like this, they will often ask you if you are absolutely SURE that you want to pursue
the case and press charges. My friend is not going to press charges. His files and moving forward are more important to him than
wasting time and looking back. Stop being dime store Columbos and wanna be lawyers and face facts. The guy is going to use the
software to get into that PC and he is going to move forward and spend his time earning money to replace what was lost instead of
losing more money and alarming his clients needlessly. This is absolutely the same position taken by management in 95% of similar
situations in this country today, and it will continue to be the situation as long as it is more expedient not to get the police
involved. As far as prosecutors are concerned, if no charges are pressed then no crime was committed (within reason). This post has
been beaten to death by idealists and people who have watched too much TV. My every word in my original post and my follow-up posts
have been scrutinized and analyzed and criticized as if we were discussing a murder or something. It has been pointed out that
things I said or described are not facts but are just opinions, and it has just been ridiculous. I'm not going to post everything I
know about this just to satisfy some amateur detectives and lawyers. I've even been called out for continuing to monitor my OP and
respond. Stop it. Don't respond to this. Let this subject just die. The matter has been decided and it is over. Move on with your
time and help somebody who needs your technical expertise and not your legal and management ignorance.
--
RMC,CPA


"R. Choate" <rchoatecpa@NoSpam.com> wrote in message news:Op7b$$ZJFHA.2648@TK2MSFTNGP14.phx.gbl...
I'm trying to help a former client of mine who is somewhat elderly but still runs a small public accounting firm. He has fired his
longtime trusted assistant after, you guessed it, she embezzled funds. She knew much more about computers than him and she was the
network (small network) administrator. I think he has most problems under control but she placed a PW on her PC and it has important
company files on it (in addit