Loading...
 

Rescue computers

There are several tools out there to help you manage and rescue computers: damaged disks, failing MBR/GRUB/Boot sectors, pics lost, passwords forgotten, etc.

Some useful tools for your use case might be some of the ones listed below

1. Make bootable usb disks

From Linux:

  • several distro specific tools (USB Disk Creator, UnetBootin, Gnome USB Multiwriter, ...)
  • many more, distro-specific (for fedora, slack, ...)


From Windows:


Multiplatform (vesions available for Linux, Windows, ...):


2. Place several linux distributions on a bootable usb disk

2.1. Ventoy

https://www.ventoy.net/

2.2. Useful Linux distros

2.2.1. SystemRescueCD

https://www.system-rescue.org/

2.2.2. Rescatux

https://www.supergrubdisk.org/rescatux/

2.2.3. Any + Boot-repair

https://help.ubuntu.com/community/Boot-Repair

2.2.4. Any + chntpw

See, for instance:

2.3. Change Windows Hello options

2.3.1. Disable for your user

If you MS Windows has the Windows Hello options enabled for loging in in your windows session, you are not using the user password for your login but those other options (such as PIN, facial recognition, etc).

In case you need it, beware that the PowerShell command specified below disables the ability to choose Windows Hello options for the user.

 
1
Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork -Name "Enabled" -Value 0


Taken from:
https://www.hexnode.com/mobile-device-management/help/script-to-disable-sign-in-options-on-windows/

2.3.2. Disable for all users - from ms windows

You can also disable Windows Hello options for all users. If you need this solution instead, you can read this answer from the MS forums:
https://answers.microsoft.com/en-us/windows/forum/all/how-to-disable-windows-hello/05ab5492-19c7-4d44-b762-d93b44a9cf65

Method 1: Using Group policy settings.

If you are on Windows 10 Pro edition, you can change the group policy settings to disable PIN sign-in option for all users.

  • Open the Run dialog box by pressing the Windows key and the R key together.
  • Type GPEDIT.MSC and hit theEnter key.
  • Go to Computer Configuration -> Administrative Templates -> System -> Logon
  • On the right side, double click on Turn on PIN sign-in and selectDisabled.
  • Similarly disable the other Windows Hello options if any.
  • Exit the Group policy editor and reboot the computer.

 

Method 2: Disabling Windows Hello in Registry.

If setting Group policy doesn’t work, you may disable the sign in options which should disableWindows Hello options in all user accounts.

Disclaimer: The registry is a database in Windows that contains important information about system hardware, installed programs and settings, and profiles of each of the user accounts on the computer. Windows often reads and updates the information in the registry.

Normally, software programs make registry changes automatically. You should not make unnecessary changes to the registry. Changing registry files incorrectly can cause Windows to stop working or make Windows report the wrong information.

Please take a backup of the registry. Follow the steps given in the link below:

How to back up and restore the registry in Windows

  • Open the Run dialog box by pressing the Windows key and the R key together.
  • Type Regedit and hit theEnter key.
  • When the Registry Editor opens, navigate to the following location:
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions
  • In the right pane, double click on the DWORD entry namedvalue set it to 0. The above method will disable Windows Hello for all user accounts. If you want to re-enableit, change the DWORD entry Value back to1.Hope it helps.Thanks,Peer SamieMicrosoft Community-Moderator

2.3.3. Disable for all users - from linux

If using a Linux Live CD/USB, I recommend that you use a lightweight recent Linux Live distro (such as Lubuntu, Ubuntu Mate or similar), and from the Live session, install chntpw, which will allow you to perform 2 tasks:

  1. disable "Windows Hello" options for all users, so that user passwords apply again.
  2. manage a user password, as usual, from within linux

  1. Mount the windows disk partition with read & write support.
    • This is done by default from the distro file manager, when you click a the name of the disk partition in the left column in the file manager GUI program.
  2. open a terminal, and navigate to the folder where the system registry files are. You can get inspired with the examples shown here:
    https://superuser.com/a/289963
  3. run program chntpw
    1. enter the SOFTWARE section, and change value of the AllowSignInOptions to 0.


Example:

x
 
1
ubuntu-mate@ubuntu-mate:/media/ubuntu-mate/3AF82C48F82C04AB/Windows/System32/config$ sudo chntpw -i SOFTWARE
2
chntpw version 1.00 140201, (c) Petter N Hagen
3
Hive <SOFTWARE> name (from header): <emRoot\System32\Config\SOFTWARE>
4
ROOT KEY at offset: 0x001020 * Subkey indexing type is: 686c <lh>
5
File size 77070336 [4980000] bytes, containing 17001 pages (+ 1 headerpage)
6
Used for data: 1326705/75937000 blocks/bytes, unused: 390/429560 blocks/bytes.
7
8
9
10
<>========<> chntpw Main Interactive Menu <>========<>
11
12
Loaded hives: <SOFTWARE>
13
14
  3 - RecoveryConsole settings
15
  4 - Show product key (DigitalProductID)
16
      - - -
17
  9 - Registry editor, now with full write support!
18
  q - Quit (you will be asked if there is something to save)
19
20
21
What to do? [1] -> 9
22
Simple registry editor. ? for help.
23
24
> cd Microsoft\PolicyManager\default\Settings
25
\Microsoft\PolicyManager\default\Settings> ?
26
Simple registry editor:
27
hive [<n>]             - list loaded hives or switch to hive numer n
28
cd <key>               - change current key
29
ls | dir [<key>]       - show subkeys & values,
30
cat | type <value>     - show key value
31
dpi <value>            - show decoded DigitalProductId value
32
hex <value>            - hexdump of value data
33
ck [<keyname>]         - Show keys class data, if it has any
34
nk <keyname>           - add key
35
dk <keyname>           - delete key (must be empty)
36
ed <value>             - Edit value
37
nv <type#> <valuename> - Add value
38
dv <valuename>         - Delete value
39
delallv                - Delete all values in current key
40
rdel <keyname>         - Recursively delete key & subkeys
41
ek <filename> <prefix> <keyname>  - export key to <filename> (Windows .reg file format)
42
debug                  - enter buffer hexeditor
43
st [<hexaddr>]         - debug function: show struct info
44
q                      - quit
45
46
\Microsoft\PolicyManager\default\Settings> ls
47
Node has 14 subkeys and 0 values
48
  key name
49
  <AllowAutoPlay>
50
  <AllowDataSense>
51
  <AllowDateTime>
52
  <AllowEditDeviceName>
53
  <AllowLanguage>
54
  <AllowOnlineTips>
55
  <AllowPowerSleep>
56
  <AllowRegion>
57
  <AllowSignInOptions>
58
  <AllowVPN>
59
  <AllowWorkplace>
60
  <AllowYourAccount>
61
  <ConfigureTaskbarCalendar>
62
  <PageVisibilityList>
63
64
\Microsoft\PolicyManager\default\Settings> cd AllowSignInOptions
65
66
(...)\default\Settings\AllowSignInOptions> ls
67
Node has 0 subkeys and 6 values
68
  size     type              value name             [value if type DWORD]
69
     4  4 REG_DWORD          <Behavior>                32 [0x20]
70
     4  4 REG_DWORD          <highrange>                1 [0x1]
71
     4  4 REG_DWORD          <lowrange>                 0 [0x0]
72
     4  4 REG_DWORD          <mergealgorithm>           1 [0x1]
73
     4  4 REG_DWORD          <policytype>               4 [0x4]
74
     4  4 REG_DWORD          <value>                    1 [0x1]
75
76
(...)\default\Settings\AllowSignInOptions> ?
77
Simple registry editor:
78
hive [<n>]             - list loaded hives or switch to hive numer n
79
cd <key>               - change current key
80
ls | dir [<key>]       - show subkeys & values,
81
cat | type <value>     - show key value
82
dpi <value>            - show decoded DigitalProductId value
83
hex <value>            - hexdump of value data
84
ck [<keyname>]         - Show keys class data, if it has any
85
nk <keyname>           - add key
86
dk <keyname>           - delete key (must be empty)
87
ed <value>             - Edit value
88
nv <type#> <valuename> - Add value
89
dv <valuename>         - Delete value
90
delallv                - Delete all values in current key
91
rdel <keyname>         - Recursively delete key & subkeys
92
ek <filename> <prefix> <keyname>  - export key to <filename> (Windows .reg file format)
93
debug                  - enter buffer hexeditor
94
st [<hexaddr>]         - debug function: show struct info
95
q                      - quit
96
97
(...)\default\Settings\AllowSignInOptions> ed value
98
EDIT: <value> of type REG_DWORD (4) with length 4 [0x4]
99
DWORD: Old value 1 [0x1], enter new value (prepend 0x if hex, empty to keep old value)
100
-> 0
101
DWORD: New value 0 [0x0], 
102
103
(...)\default\Settings\AllowSignInOptions> q           
104
105
106
<>========<> chntpw Main Interactive Menu <>========<>
107
108
Loaded hives: <SOFTWARE>
109
110
  3 - RecoveryConsole settings
111
  4 - Show product key (DigitalProductID)
112
      - - -
113
  9 - Registry editor, now with full write support!
114
  q - Quit (you will be asked if there is something to save)
115
116
117
What to do? [1] -> q
118
119
Hives that have changed:
120
 #  Name
121
 0  <SOFTWARE>
122
Write hive files? (y/n) [n] : y
123
 0  <SOFTWARE> - OK
124
ubuntu-mate@ubuntu-mate:/media/ubuntu-mate/3AF82C48F82C04AB/Windows/System32/config$

2.4. Manage the user as needed

Use chntpw again to manage the user as needed.

You need to install the program, browse to the folder where the ./Windows/System32/config/ folder is, and execute the command like the own shown below:

xxxxxxxxxx
 
ubuntu-mate@ubuntu-mate:/media/ubuntu-mate/3AF82C48F82C04AB/Windows/System32/config$ sudo chntpw -i SAM


Proceed as needed, and remember to quit with q, and save the changes with y (lowercase)

3. Use the tool and enjoy

Follow the instructions for the chosen tool, in your case. And enjoy.


Alias names for this page:
Rescue | Reset | Fix | Boot | GRUB | Emergency | USB | Ventoy | DiskWriter | USB Disk Writer | Multiwriter | ISO

Image Seed: noun \ˈsēd\ : the beginning of something which continues to develop or grow

Knowledge seeds

Switch Language