Some times there might be cases like forgetting WebSphere admin console password where we need to disable WebSphere Application Server security by editing configuration files without logging into the WAS admin console. In order to does this you should edit some configuration files which is described below:
1-Browse to the following directory :
WAS_INSTALL_DIR/profiles//config/cells//
2-Open file named security.xml
3-Seatch for tag like this <security:Security.
4-This would be the first tag in security.xml file. In this tag we can see an attribute called enabled=”true”. Just change this tag from current state to enabled=”false”
before doing this create a backup from file security.xml .