Under DOS (or pick up the hard disk), copy the / windows / repair / sam file to the / windows / system32 / config / directory overwrite the original file (if you don't worry, you can back up the original SAM file), the password of the Administrator account is empty DEL% WinNT% / System32 / Config / Sam.dat