Damn, wish I would have seen post #14 yesterday. Had a laptop with win 8, and UEFI/Secure boot. I was able to access the drive using PE and do some of the tricks I've read elsewhere, but all those holes where closed.. So I had to do a reinstall. The problem was a MS/Nonlocal account that the account & password were no longer valid, and was not able to choose a different login. Anyway, I'll have this info for anything that may pop up in the future.. Thanks
I may not have understood what the quoted part means, but it may be too late. I deleted the indicated keys, but wasn't sure from the post whether I was or was not supposed to change the "V" key, so I did nothing to the "V" key. Rebooted the machine and now that account does not show on the login screen. I can see the account in User Profiles, but cannot get to a login screen for the user account. Any ideas/help? I then tried this again on another laptop, but changed the "V" key, with the same outcome. The user no longer is showing on the login screen, but can see the user in User Profiles.
I have run into one other problem that will prevent editing the registry in Win PE. The hybrid shutdown can cause the drive to be locked so Win PE will only allow READ access to the files. Any changes can't be written back to the disk. I also tried from a Linux boot disk with similar (lack of) results.
Hi Have you succeeded in writing a tool/script which can automate this ?. Yes, "fast startup" feature of 8.x/10 can cause serious headaches when it came to offline regedit/password reset. The solution is not to shutdown but reboot and then boot to PE/Linux - then fast startup won't be active. I would also recommend deleting hiberfil.sys , swapfile.sys and pagefile.sys from the root of C drive which will reset fast startup even if it's active (from PE).
Good evening When i get to Regedit I don't see : Domain HKEY_LOCAL_MACHINE\SAM\SAM\Domain\Account\Users\Names Can you help me? Thanks Regards PS: I have Windows 10 O.S
Good evening When i get to Regedit I don't see : Domain HKEY_LOCAL_MACHINE\SAM\SAM\Domain\Account\Users\Names Can you help me? Thanks Regards PS: I have Windows 10 O.S
I do not have that key in my registry. This is not unique to networks with Microsoft domain or online authentication? For home computers with offline accounts I do not believe that this key exists or is required.
If you're unable to reset your password from Microsoft's password reset page, give a try with PCUnlocker, Passcape, Elcomsoft, Passware, etc. Those tools claim that they can convert MS account to local account offline & regain access.