This is a new exploit for bypassing windows 7 admin security which requires no CDs or other third party tools. I don't know if its been patched or not, but I'm sure that it 100% works.
- Press the power button to turn on your computer.
- While your on the screen with the animated Microsoft logo press and hold the power button until it turns off.
- Press the power button to turn on again.
- You should now see the option to launch Start Up Repair. Select the option and press enter.
- Run Startup Repair.
- You should see a blue bar that moves across the screen repeatedly. Above it should be messages that say "searching for problems" or something.
- The message should change to "Attempting repairs" within a few minutes.
- Leave the computer running. This message should be there for 10-40 minutes depending on your computer.
- After 10-40mins a message should pop up that says "start up repair could not fix the problem". Click the arrow next to "show problem details".
- Scroll to the bottom and click the link to the .txt file.
- Notepad should open up with the file.
- In notepad click File->Open.
- You can now use the file browser to perform the sethc.exe hack.
- Go to C:\Windows\system32 and find sethc.exe and rename it to random.exe or something.
- Copy the cmd.exe and rename the copied file to sethc.exe
- Restart the computer and at the login screen press the "shift" key 5 times in quick succession.
- Type in the cmd window "control userpasswords2" without the quotation marks.
- You can now make a new admin account and login with it or make your account an admin.