How can I regain access to the admin account of Intella Investigator/Connect?

These instructions are written from the point of view of Intella Connect. However, the instructions will be the same if you use Intella Investigator, unless otherwise specified.

If you need to reset the admin account to the default password of admin:
1. Shut down Intella Connect.
2. Go into the following folder, where [USERNAME] is the account used to run Intella on the machine where Intella runs.
For Intella Connect: C:\Users\[USERNAME]\AppData\Roaming\Intella Investigator
For Intella Investigator: C:\Users\[USERNAME]\AppData\Roaming\Intella Connect
3. Make a backup of users.enc (as a precaution).
4. Open the users.enc file with a text editor.
5. In the line that holds this text:
admin=[...]
Replace the entire line with:
admin=qLSwQDbkNE_kwviCVkT4EQ

6. Save the file.
7. Start Intella Connect.
8. Log in using the default password, admin.

If you need to remove 2FA from the admin account:
  1. Shut down Intella Connect.
  2. Go to the folder: C:\Users\[USERNAME]\AppData\Roaming\Intella\auth, where [USERNAME] is the account used to run Intella Connect on the machine where Intella Connect runs.
  3. Make a backup of the users.xml file (as a precaution).
  4. Open the users.xml file with a text editor.
  5. In the line that holds this text:
    <profile username='admin' [...]

    Change: tfaverified='true'
    To: tfaverified='false'

  6. Save the file.
  7. Start Intella Connect.
The admin account should now no longer have 2FA on it. You can now login using only the admin password. You can then set up 2FA for this account from scratch.
Tags