How to reset your lost/forgotten Password in McAfee ProtectionPilot 1.5

I’ve never been a big fan of ProtectionPilot, but the offerings of their competition are usually even worse. Today i’ve installed a new instance of McAfee ProtectionPilot 1.5, and i’ve used a special character when entering the password. After completing the setup routine, i wasn’t able to login. If that was caused by the special character, or because i mistyped the password (twice!), i don’t know.

Anyway, i wasn’t able to login into PP, receiving the error message that the password is wrong (or the server isn’t running). I’ve verified that the PP server was up and running (naimserv.exe listening on ports 81, 82 by default). I’ve had a look at the server logfile (in the PP install path, called server.log), showing the familiar HTTP 403 error message whenever i entered the wrong password.

McAfee’s official statement is that you have to reinstall PP to reset the password. But i was to lazy for this.

In case you didn’t know, ProtectionPilot is basically a castrated version of McAfee’s ePolicy server. So when looking around the web for what i could do now, i’ve found an interesting forum post, that showed how you can reset the password in McAfee ePolicy.

The MSDE that ships with PP didn’t have neat database access tools, and the solution is also distributed along the thread.

Basically when dealing with MSDE, you’ll have to use commandline tool osql to access the ProtectionPilot database. osql is located in %ProgramFiles%\Microsoft SQL Server\8.0\Tools.

First, look how the database is called. You can use osql -E -l to do this. You’ll then see your database instances in the format of MACHINE\EPOSERVER. The ProtectionPilot database instance is usually called EPOSERVER.

Then, use osql -E -S MACHINE\EPOSERVER to connect to the ProtectionPilot database instance.

Next, you need to the name of the ProtectionPilot database (not the instance name). Having not had much experience with Microsoft’s SQL products, i just searched for *.mdf files, which do correspond to the database name. Usually the database name is EPO_MACHINE (where MACHINE is the name of the machine running ProtectionPilot).

Then, enter the following commands:

UPDATE UserTable SET Password='YheZGOiKbpSa6Zza9uYlLxtW/XI=' WHERE UserName='admin'

I’m not sure if the field names are correct (they’re from memory), you can use SELECT * FROM UserTable to see the field descriptions.

If you’ve done this, your ProtectionPilot password will be “epo”. You should now be able to login correctly.


  1. Ian Waters:

    Thanks worked a treat for me!!

  2. Tomking:

    Hi my database name is ePO_SERVER-NAME. It appears OSQL cannot recognize “-”. So it keeps telling me “cannot locate entries for database ePO_SERVER”. Is there a way to walk around this issue.


  3. Leonardo:

    use [ePO_SERVER-NAME]

    Good luck

  4. Tomking:

    Thanks Leonardo. Manage to reset the password. Now the problem is the McAfee ProtectionPilot Server service won’t start. Always give error says the service doesn’t response in a timely manner. I just can’t win.

  5. Al:

    my sql instance was ANTIVIRUS, so i recommend using the sql monitor/manager to make sure you get the right instance name the command “osql -E -l” did not work for me, but the rest did, thanks a lot!

  6. Al:

    Thanks Leonardo. Manage to reset the password. Now the problem is the McAfee ProtectionPilot Server service won’t start. Always give error says the service doesn’t response in a timely manner. I just can’t win.

    i had the same problem, you can tell it that after it fails to try again and so on, that fixed it for me.

  7. BlackNinjaVirus:

    It’s his typo -l is for timeout limits
    use capitals:
    osql -E -L

  8. BlackNinjaVirus:


    it’s the -L option by itself

    osql -L

  9. CAAP:

    Thanks a lot, close an issue for me.

  10. Dave:

    Changed the password as detailed but still cannot login to the console. Any other ideas?

  11. naseeb:

    thanks work realy great !!!!
    the crypt password didt’nt work for me.. whatever
    i have Protection Pilot 1.X and here what work’s for me.

    the name of my Pc is SONY and ePO_SONY is my database

    \\Update for password to ‘epo’

    C:\Program Files\Microsoft SQL Server\80\Tools\Binn>osql.exe -S SONY -E
    UPDATE UserTable SET Password=’meTwdvxcK9lnY6QNOsVexH9psAU8z0HbZ2OkDTrFXsR/abAFPM9B3Q==’ WHERE UserName=’admin’

    reboot the PC after


  12. flyinggoose:

    Works great, I had no problems and this solves a problem we have had with many of our clients that we “lost” (forgot) their passwords.

  13. flyinggoose:

    How do you encrypt the password. I would like to change it to something other than EPO so we can go through our clients and change their passwords to a standard one without loging into PP everytime.

  14. flyinggoose:

    How do you encrypt the password?

  15. TekServer:

    I know this is a longshot, being an old topic and all; but is it possible anyone knows how to apply this (or a similar) procedure to ProtectionPilot 1.0.0? Apparently that older version uses a customized, built in SQL server … with no “osql” utility that I can find …

    Thanks in advance, just in case!


  16. Lukas Beeler:


    You could try to use osql from a normal MSDE installation.

  17. TekServer:

    I considered that, but I was unsure how to proceed. Would I just copy osql.exe into the C:\Program Files\Network Associates\MSSQL\Binn folder and then run it from there?

    Thanks for the prompt response!

  18. TekServer:


    I tried that, then realized I’d forgotten to mention something: there is another SQL database on this machine, associated with Backup Exec. So the results I get (sanitized) are:




  19. Torben:

    thx for the help… i changed the password with management studio express 2005 and worked fine for me. Very good help.

  20. Serkan SÖNMEZ:

    It’s work. Thanks a lot.

Leave a comment