On 12/22/2023 4:33 AM, Robert in CA wrote:
> I just read your instructions for hacking,.. allot to take in...
> I'll have to re-read it a couple of times. You want me to use
> my 780 Rescue CD to gain access to the cmd prompt to make
> the changes then verify my account has been elevated and change
> it back. correct?
>
> I don't see from the instructions how to restart Windows boot
> manager and I've never seen these safe modes before. Also where
> it's asking for the password and the next I'm entering commands
> in a command prompt. How did I get there?
>
> Am I entering those same commands?
>
> Thanks,..
> Merry Christmas
> Robert
>

The only password, is the assignment of "qwerty1" to the
account I was making. None of the other procedures require
entering a password for the "hard work".

The hack, uses Sticky Keys (pressing shift key five times
in succession) as a trigger. The window that opens, is
already an administrator. Using that window, you can do any
administrator tasks that need doing. Any other logging in
after the work is done, is only for an un-elevated look around
at the scenery.

Macrium seems to be running as Administrator, when you boot up
its CD. That's how the files succumb to the charms of Macrium.

When you boot Macrium, there's no logging in.

Paul

I completed the MediaCreationTool download
but it would only burn DVD's. there were no
options for the Patriot.

https://postimg.cc/tZHsJXTP

https://postimg.cc/sv2vvHVn

https://postimg.cc/5Q2NQjMH

https://postimg.cc/5jstd5w8

Then I switched hd again and tried the one labeled bad:

https://postimg.cc/G9f1xXFg

I put the 780 Win 10 hd back in.

I'm broke until the 27th and then I can buy the
double sided DVD's.

Robert

On 12/22/2023 8:00 AM, Robert in CA wrote:
> I completed the MediaCreationTool download
> but it would only burn DVD's. there were no
> options for the Patriot.
>
> https://postimg.cc/tZHsJXTP
>
> https://postimg.cc/sv2vvHVn
>
> https://postimg.cc/5Q2NQjMH
>
> https://postimg.cc/5jstd5w8
>
> Then I switched hd again and tried the one labeled bad:
>
> https://postimg.cc/G9f1xXFg
>
> I put the 780 Win 10 hd back in.
>
> I'm broke until the 27th and then I can buy the
> double sided DVD's.
>
>
> Robert
>

The first four postimg images, yes, the IMAPI2 (or any other burner
for that matter), can't put more than about 4,700,000,000
bytes or so on a single-layer DVD. The numbers are in Wikipedia.

DVD-R SL 4,707,319,808
DVD+R SL 4,700,372,992
DVD-R DL 8,543,666,176
DVD+R DL 8,547,991,552

The Linux version might be well above 4,700 while the
Windows MediaCreationTool version is just a bit too big.
Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
Dual-layer DVD would also work for both.

You don't have to do the following. It's just an illustration of
how you deal with the too-big DVD, when all you own is single layer media.

It's possible to artificially trim the DVD size down, to make
it fit. You need a copy of "oscdimg.exe", and when you got the
Macrium download, it's possible that file would be in there.
A WADK kit (a long download) would also have it.

http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E

md F:\WORK # make a temporary directory for the work, 20GB slack should be OK

# Copy the original mounted ISO contents into WORK. This will take a while.

sources\
efi\
...
autorun.inf

# First part of process, works on a specific file in sources\

F:\WORK\sources\ # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.

# The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
# The three lines of command go onto one command line, with a space between line contents.

oscdimg ... F:\WORK F:\W190364.iso # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
# For your work, you'd pick a descriptive name for your new.iso .

*******

For the boot problem, you'd need to do Disk Management analysis
to see if the partitions are intact. The Macrium "Boot Repair"
on the CD may work, but only if there isn't severe damage to
the content on the drive. This could also happen, if you
attempt to rebuild the boot details, when too many unrelated
disks are also in the computer. Boot repair should be done
with just the affected hard drive being the only storage.

# your boot error

https://postimg.cc/G9f1xXFg

Note that boot repair does not always work. I've tried and tried
at various times to fix hard drives, and the repair just does not
work. So if it does not work, it's not exactly unexpected. But
it is pleasant when it does decide to work :-)

Paul

Paul wrote:
> On 12/22/2023 8:00 AM, Robert in CA wrote:
>> I completed the MediaCreationTool download
>> but it would only burn DVD's. there were no
>> options for the Patriot.
>>
>> https://postimg.cc/tZHsJXTP
>>
>> https://postimg.cc/sv2vvHVn
>>
>> https://postimg.cc/5Q2NQjMH
>>
>> https://postimg.cc/5jstd5w8
>>
>> Then I switched hd again and tried the one labeled bad:
>>
>> https://postimg.cc/G9f1xXFg
>>
>> I put the 780 Win 10 hd back in.
>>
>> I'm broke until the 27th and then I can buy the
>> double sided DVD's.
>>
>>
>> Robert
>>
>
> The first four postimg images, yes, the IMAPI2 (or any other burner
> for that matter), can't put more than about 4,700,000,000
> bytes or so on a single-layer DVD. The numbers are in Wikipedia.
>
> DVD-R SL 4,707,319,808
> DVD+R SL 4,700,372,992
> DVD-R DL 8,543,666,176
> DVD+R DL 8,547,991,552
>
> The Linux version might be well above 4,700 while the
> Windows MediaCreationTool version is just a bit too big.
> Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
> Dual-layer DVD would also work for both.
>
> You don't have to do the following. It's just an illustration of
> how you deal with the too-big DVD, when all you own is single layer media.
>
> It's possible to artificially trim the DVD size down, to make
> it fit. You need a copy of "oscdimg.exe", and when you got the
> Macrium download, it's possible that file would be in there.
> A WADK kit (a long download) would also have it.
>
> http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E
>
> md F:\WORK # make a temporary directory for the work, 20GB slack should be OK
>
> # Copy the original mounted ISO contents into WORK. This will take a while.
>
> sources\
> efi\
> ...
> autorun.inf
>
> # First part of process, works on a specific file in sources\
>
> F:\WORK\sources\ # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.
>
> # The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
> # The three lines of command go onto one command line, with a space between line contents.
>
> oscdimg ... F:\WORK F:\W190364.iso # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
> # For your work, you'd pick a descriptive name for your new.iso .
>
> *******
>
> For the boot problem, you'd need to do Disk Management analysis
> to see if the partitions are intact. The Macrium "Boot Repair"
> on the CD may work, but only if there isn't severe damage to
> the content on the drive. This could also happen, if you
> attempt to rebuild the boot details, when too many unrelated
> disks are also in the computer. Boot repair should be done
> with just the affected hard drive being the only storage.
>
> # your boot error
>
> https://postimg.cc/G9f1xXFg
>
> Note that boot repair does not always work. I've tried and tried
> at various times to fix hard drives, and the repair just does not
> work. So if it does not work, it's not exactly unexpected. But
> it is pleasant when it does decide to work :-)
>
> Paul
>

This on the 8500 Sea Monkey and from now on all my posts
will be on Seamonkey unless I say other wise.

Let me make sure I understand what you want me to do.
You want me to use the macrium Rescue CD to go into a
'Safe Mode' becaue were not metal to metal there and then
access the cmd prompt from there.

Then enter the commands to elevate my account to a
Administrators account where I could delete the other
account with the pin number, correct?

I'm suppose to enter this?

NET USER TEMP qwerty1 /ADD # Adding Account TEMP, Password qwerty1
NET LOCALGROUP Administrators TEMP /add # Don't forget the "s" on the
end of Administrators

Also it seems in your instructions after I do the commands above
it shows where I haven't logged in yet and it shows the password
but then it jumps to the CMD prompt again? You lost me at that point.

I do have to switch hd's again to do my monthly mrimgs but
I'll switch them back afterwards.

I'll order the DVD's on the 27th,...it sucks we have to waste time
because the program won't accept the Patriot. Question, since it
only will accept DVD's will it accept the double layer DVD_RDL's?

What else?

At first I thought you were talking about Win 10 but then I realized
you were talking about the bad hd I put in to see if it was indeed bad.
Whew!
We could try to repair it after we get the 780 Win 10 finished if you like.

I'm a bit worried about the 8500 Win 10 hd now because it also many
be a Win 7 Pro. At present, we only have the 780 Win 10 hd were working
on. Can we use the MediaCreationTool on a Win7hd to make it a Win 10 hd?

Thanks,
Robert

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/22/2023 8:00 AM, Robert in CA wrote:
>> I completed the MediaCreationTool download
>> but it would only burn DVD's. there were no
>> options for the Patriot.
>>
>> https://postimg.cc/tZHsJXTP
>>
>> https://postimg.cc/sv2vvHVn
>>
>> https://postimg.cc/5Q2NQjMH
>>
>> https://postimg.cc/5jstd5w8
>>
>> Then I switched hd again and tried the one labeled bad:
>>
>> https://postimg.cc/G9f1xXFg
>>
>> I put the 780 Win 10 hd back in.
>>
>> I'm broke until the 27th and then I can buy the
>> double sided DVD's.
>>
>>
>> Robert
>>
>
> The first four postimg images, yes, the IMAPI2 (or any other burner
> for that matter), can't put more than about 4,700,000,000
> bytes or so on a single-layer DVD. The numbers are in Wikipedia.
>
> DVD-R SL 4,707,319,808
> DVD+R SL 4,700,372,992
> DVD-R DL 8,543,666,176
> DVD+R DL 8,547,991,552
>
> The Linux version might be well above 4,700 while the
> Windows MediaCreationTool version is just a bit too big.
> Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
> Dual-layer DVD would also work for both.
>
> You don't have to do the following. It's just an illustration of
> how you deal with the too-big DVD, when all you own is single layer media.
>
> It's possible to artificially trim the DVD size down, to make
> it fit. You need a copy of "oscdimg.exe", and when you got the
> Macrium download, it's possible that file would be in there.
> A WADK kit (a long download) would also have it.
>
> http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E
>
> md F:\WORK # make a temporary directory for the work, 20GB slack should be OK
>
> # Copy the original mounted ISO contents into WORK. This will take a while.
>
> sources\
> efi\
> ...
> autorun.inf
>
> # First part of process, works on a specific file in sources\
>
> F:\WORK\sources\ # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.
>
> # The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
> # The three lines of command go onto one command line, with a space between line contents.
>
> oscdimg ... F:\WORK F:\W190364.iso # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
> # For your work, you'd pick a descriptive name for your new.iso .
>
> *******
>
> For the boot problem, you'd need to do Disk Management analysis
> to see if the partitions are intact. The Macrium "Boot Repair"
> on the CD may work, but only if there isn't severe damage to
> the content on the drive. This could also happen, if you
> attempt to rebuild the boot details, when too many unrelated
> disks are also in the computer. Boot repair should be done
> with just the affected hard drive being the only storage.
>
> # your boot error
>
> https://postimg.cc/G9f1xXFg
>
> Note that boot repair does not always work. I've tried and tried
> at various times to fix hard drives, and the repair just does not
> work. So if it does not work, it's not exactly unexpected. But
> it is pleasant when it does decide to work :-)
>
> Paul
>

Do I have this sequence right?

• select settings
• select update/security
• select recovery - restart now
• select Troubleshoot
• select advanced options
• select start-up settings
• I load the 780 Win10 Rescue CD
• in macirum, use CMD prompt to enter commands

cd Windows\System32
ren sethc.exe sethc.exe.bak
copy cmd.exe sethc .exe

• close CMD prompt
• re- restart to WBM with safe mode 4 (I've never seen those startup
settings before)

There's is no shut down/restart command in macrium. When doing mrimgs I
usually
remove the CD from the drive. Then close Macrium and wait for the screen
to go black and then pull the USB connection then I get the WBM screen.
So I would still close macrium and then when it restarts I could select
Safe mode then. Is that what you want me to do?

I see you have a new account Lowboy your using so will I also have a new
account
that I will be using but can I still access the CMD prompt without
logging in ?

• enter commands

C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP /ADD

• press shift key 5 times (sticky keys) - opens Admin window, not logged
in yet
• verify account has changed to Administrator
• re-boot with Rescue media
• select CMD prompt and enter commands to remove the hack

C:
cd Windows\System 32
del sethc.exe
ren sethc.exe.bak sethc.exe

Robert

_

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/23/2023 1:37 PM, Robert in CA wrote:
> Paul wrote:
>> On 12/22/2023 8:00 AM, Robert in CA wrote:
>>> I completed the MediaCreationTool download
>>> but it would only burn DVD's. there were no
>>> options for the Patriot.
>>>
>>> https://postimg.cc/tZHsJXTP
>>>
>>> https://postimg.cc/sv2vvHVn
>>>
>>> https://postimg.cc/5Q2NQjMH
>>>
>>> https://postimg.cc/5jstd5w8
>>>
>>> Then I switched hd again and tried the one labeled bad:
>>>
>>> https://postimg.cc/G9f1xXFg
>>>
>>> I put the 780 Win 10 hd back in.
>>>
>>> I'm broke until the 27th and then I can buy the
>>> double sided DVD's.
>>>
>>>
>>> Robert
>>>
>>
>> The first four postimg images, yes, the IMAPI2 (or any other burner
>> for that matter), can't put more than about 4,700,000,000
>> bytes or so on a single-layer DVD. The numbers are in Wikipedia.
>>
>> DVD-R SL   4,707,319,808
>> DVD+R SL   4,700,372,992
>> DVD-R DL   8,543,666,176
>> DVD+R DL   8,547,991,552
>>
>> The Linux version might be well above 4,700 while the
>> Windows MediaCreationTool version is just a bit too big.
>> Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
>> Dual-layer DVD would also work for both.
>>
>> You don't have to do the following. It's just an illustration of
>> how you deal with the too-big DVD, when all you own is single layer media.
>>
>> It's possible to artificially trim the DVD size down, to make
>> it fit. You need a copy of "oscdimg.exe", and when you got the
>> Macrium download, it's possible that file would be in there.
>> A WADK kit (a long download) would also have it.
>>
>>     http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E
>>
>>     md F:\WORK        # make a temporary directory for the work, 20GB slack should be OK
>>
>>     # Copy the original mounted ISO contents into WORK. This will take a while.
>>
>>      sources\
>>      efi\
>>      ...
>>      autorun.inf
>>
>>     # First part of process, works on a specific file in sources\
>>
>>      F:\WORK\sources\        # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.
>>
>>     # The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
>>     # The three lines of command go onto one command line, with a space between line contents.
>>
>>      oscdimg ...  F:\WORK   F:\W190364.iso   # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
>>                                              # For your work, you'd pick a descriptive name for your new.iso .
>>
>> *******
>>
>> For the boot problem, you'd need to do Disk Management analysis
>> to see if the partitions are intact. The Macrium "Boot Repair"
>> on the CD may work, but only if there isn't severe damage to
>> the content on the drive. This could also happen, if you
>> attempt to rebuild the boot details, when too many unrelated
>> disks are also in the computer. Boot repair should be done
>> with just the affected hard drive being the only storage.
>>
>>     # your boot error
>>
>>     https://postimg.cc/G9f1xXFg
>>
>> Note that boot repair does not always work. I've tried and tried
>> at various times to fix hard drives, and the repair just does not
>> work. So if it does not work, it's not exactly unexpected. But
>> it is pleasant when it does decide to work :-)
>>
>>    Paul
>>
>
>
> Do I have this sequence right?
>
> •    select settings
> •    select update/security
> •    select recovery - restart now
> •    select Troubleshoot
> •    select advanced options
> •    select start-up settings
> •    I load the 780 Win10 Rescue CD
> •    in macirum, use CMD prompt to enter commands
>
> cd Windows\System32
> ren sethc.exe sethc.exe.bak
> copy cmd.exe sethc .exe
>
> •    close CMD prompt
> •    re- restart to WBM with safe mode 4 (I've never seen those startup settings before)
>
> There's is no shut down/restart command in macrium. When doing mrimgs I usually
> remove the CD from the drive. Then close Macrium and wait for the screen to go black and then pull the USB connection then I get the WBM screen. So I would still close macrium and then when it restarts I could select Safe mode then. Is that what you want me to do?
>
> I see you have a new account Lowboy your using so will I also have a new account
> that I will be using but can I still access the CMD prompt without logging in ?
>
> •    enter commands
>
> C:\\WINDOWS\system32>net user TEMP qwertyl  /ADD
> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP  /ADD
>
> •    press shift key 5 times (sticky keys) - opens Admin window, not logged in yet
> •    verify account has changed to Administrator
> •    re-boot with Rescue media
> •    select CMD prompt and enter commands to remove the hack
>
> C:
> cd Windows\System 32
> del sethc.exe
> ren sethc.exe.bak sethc.exe
>
>
>
>
> Robert

This sequence, needs C: as the first line. You MUST switch to the
C: partition, before the other three commands. There are four lines of input.
The first line has the two characters in it.

C: # This changes to the C: partition
cd Windows\System32 # Current directory is C:\Windows\System32
ren sethc.exe sethc.exe.bak # This renames the original file, for safe keeping
copy cmd.exe sethc.exe # This places cmd.exe in place of sethc.exe file, as a "fake"

*******

Macrium does have a selector for shutdown/restart. It's in
newer versions of the Macrium Rescue CD. It is the red button
in the lower left corner. Clicking it, if there is a selector, it
will have as options "Reboot" or "Shutdown" showing in a tiny dialog box.
That's where you get to select it.

*******

When you have the Administrator level window to work in, you can
do anything you want. This sequence for example, adds a new account
that has administrator rights. This account is TEMP. And the
password is "qwerty1".

C:\WINDOWS\system32> net user TEMP qwertyl /ADD
C:\WINDOWS\system32> net LOCALGROUP Administrators TEMP /ADD

You could do a third line at that time, like this. This would
add the account "Rob" to the Administrators group. This assumes
the "Rob" account already exists. That's why the command only
has the one line. "Rob" must exist and be a working account, for this
to be worth doing.

net LOCALGROUP Administrators Rob /ADD

See how easy this is ? And how much fun ?

Do not be distracted by the accounts showing in my diagram.
("Lowboy" is the unelevated account, I use to "test for handcuffs" in the OS.)

What happens to the computer during this procedure, does not "rely" on the account choices.
What matters, is entering those commands in the Administrator window.

That's why we're doing the hack, is to regain control of the computer
so we can do other important work.

Once the hack lines are entered, you can type "exit" into the
Administrator window, or you can click the "X" in the upper left
corner of that window. You can log into any account showing
for fun if you want (lower left corner choices). If everything
is working, when you reboot the computer, any changes should
now be working, and say, the Rob account could have new Administrator privileges.
That's what this is for. Getting away from entering some foreign-account PIN.
We need an account which you control, to have Administrators privileges.

Paul

Paul wrote:
> On 12/23/2023 1:37 PM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/22/2023 8:00 AM, Robert in CA wrote:
>>>> I completed the MediaCreationTool download
>>>> but it would only burn DVD's. there were no
>>>> options for the Patriot.
>>>>
>>>> https://postimg.cc/tZHsJXTP
>>>>
>>>> https://postimg.cc/sv2vvHVn
>>>>
>>>> https://postimg.cc/5Q2NQjMH
>>>>
>>>> https://postimg.cc/5jstd5w8
>>>>
>>>> Then I switched hd again and tried the one labeled bad:
>>>>
>>>> https://postimg.cc/G9f1xXFg
>>>>
>>>> I put the 780 Win 10 hd back in.
>>>>
>>>> I'm broke until the 27th and then I can buy the
>>>> double sided DVD's.
>>>>
>>>>
>>>> Robert
>>>>
>>>
>>> The first four postimg images, yes, the IMAPI2 (or any other burner
>>> for that matter), can't put more than about 4,700,000,000
>>> bytes or so on a single-layer DVD. The numbers are in Wikipedia.
>>>
>>> DVD-R SL   4,707,319,808
>>> DVD+R SL   4,700,372,992
>>> DVD-R DL   8,543,666,176
>>> DVD+R DL   8,547,991,552
>>>
>>> The Linux version might be well above 4,700 while the
>>> Windows MediaCreationTool version is just a bit too big.
>>> Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
>>> Dual-layer DVD would also work for both.
>>>
>>> You don't have to do the following. It's just an illustration of
>>> how you deal with the too-big DVD, when all you own is single layer media.
>>>
>>> It's possible to artificially trim the DVD size down, to make
>>> it fit. You need a copy of "oscdimg.exe", and when you got the
>>> Macrium download, it's possible that file would be in there.
>>> A WADK kit (a long download) would also have it.
>>>
>>>     http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E
>>>
>>>     md F:\WORK        # make a temporary directory for the work, 20GB slack should be OK
>>>
>>>     # Copy the original mounted ISO contents into WORK. This will take a while.
>>>
>>>      sources\
>>>      efi\
>>>      ...
>>>      autorun.inf
>>>
>>>     # First part of process, works on a specific file in sources\
>>>
>>>      F:\WORK\sources\        # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.
>>>
>>>     # The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
>>>     # The three lines of command go onto one command line, with a space between line contents.
>>>
>>>      oscdimg ...  F:\WORK   F:\W190364.iso   # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
>>>                                              # For your work, you'd pick a descriptive name for your new.iso .
>>>
>>> *******
>>>
>>> For the boot problem, you'd need to do Disk Management analysis
>>> to see if the partitions are intact. The Macrium "Boot Repair"
>>> on the CD may work, but only if there isn't severe damage to
>>> the content on the drive. This could also happen, if you
>>> attempt to rebuild the boot details, when too many unrelated
>>> disks are also in the computer. Boot repair should be done
>>> with just the affected hard drive being the only storage.
>>>
>>>     # your boot error
>>>
>>>     https://postimg.cc/G9f1xXFg
>>>
>>> Note that boot repair does not always work. I've tried and tried
>>> at various times to fix hard drives, and the repair just does not
>>> work. So if it does not work, it's not exactly unexpected. But
>>> it is pleasant when it does decide to work :-)
>>>
>>>    Paul
>>>
>>
>>
>> Do I have this sequence right?
>>
>> •    select settings
>> •    select update/security
>> •    select recovery - restart now
>> •    select Troubleshoot
>> •    select advanced options
>> •    select start-up settings
>> •    I load the 780 Win10 Rescue CD
>> •    in macirum, use CMD prompt to enter commands
>>
>> cd Windows\System32
>> ren sethc.exe sethc.exe.bak
>> copy cmd.exe sethc .exe
>>
>> •    close CMD prompt
>> •    re- restart to WBM with safe mode 4 (I've never seen those startup settings before)
>>
>> There's is no shut down/restart command in macrium. When doing mrimgs I usually
>> remove the CD from the drive. Then close Macrium and wait for the screen to go black and then pull the USB connection then I get the WBM screen. So I would still close macrium and then when it restarts I could select Safe mode then. Is that what you want me to do?
>>
>> I see you have a new account Lowboy your using so will I also have a new account
>> that I will be using but can I still access the CMD prompt without logging in ?
>>
>> •    enter commands
>>
>> C:\\WINDOWS\system32>net user TEMP qwertyl  /ADD
>> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP  /ADD
>>
>> •    press shift key 5 times (sticky keys) - opens Admin window, not logged in yet
>> •    verify account has changed to Administrator
>> •    re-boot with Rescue media
>> •    select CMD prompt and enter commands to remove the hack
>>
>> C:
>> cd Windows\System 32
>> del sethc.exe
>> ren sethc.exe.bak sethc.exe
>>
>>
>>
>>
>> Robert
>
> This sequence, needs C: as the first line. You MUST switch to the
> C: partition, before the other three commands. There are four lines of input.
> The first line has the two characters in it.
>
> C: # This changes to the C: partition
> cd Windows\System32 # Current directory is C:\Windows\System32
> ren sethc.exe sethc.exe.bak # This renames the original file, for safe keeping
> copy cmd.exe sethc.exe # This places cmd.exe in place of sethc.exe file, as a "fake"
>
> *******
>
> Macrium does have a selector for shutdown/restart. It's in
> newer versions of the Macrium Rescue CD. It is the red button
> in the lower left corner. Clicking it, if there is a selector, it
> will have as options "Reboot" or "Shutdown" showing in a tiny dialog box.
> That's where you get to select it.
>
> *******
>
> When you have the Administrator level window to work in, you can
> do anything you want. This sequence for example, adds a new account
> that has administrator rights. This account is TEMP. And the
> password is "qwerty1".
>
> C:\WINDOWS\system32> net user TEMP qwertyl /ADD
> C:\WINDOWS\system32> net LOCALGROUP Administrators TEMP /ADD
>
> You could do a third line at that time, like this. This would
> add the account "Rob" to the Administrators group. This assumes
> the "Rob" account already exists. That's why the command only
> has the one line. "Rob" must exist and be a working account, for this
> to be worth doing.
>
> net LOCALGROUP Administrators Rob /ADD
>
> See how easy this is ? And how much fun ?
>
> Do not be distracted by the accounts showing in my diagram.
> ("Lowboy" is the unelevated account, I use to "test for handcuffs" in the OS.)
>
> What happens to the computer during this procedure, does not "rely" on the account choices.
> What matters, is entering those commands in the Administrator window.
>
> That's why we're doing the hack, is to regain control of the computer
> so we can do other important work.
>
> Once the hack lines are entered, you can type "exit" into the
> Administrator window, or you can click the "X" in the upper left
> corner of that window. You can log into any account showing
> for fun if you want (lower left corner choices). If everything
> is working, when you reboot the computer, any changes should
> now be working, and say, the Rob account could have new Administrator privileges.
> That's what this is for. Getting away from entering some foreign-account PIN.
> We need an account which you control, to have Administrators privileges.
>
> Paul
>

On 12/24/2023 1:33 AM, Robert in CA wrote:
> Paul wrote:
>> On 12/23/2023 1:37 PM, Robert in CA wrote:
>>> Paul wrote:
>>>> On 12/22/2023 8:00 AM, Robert in CA wrote:
>>>>> I completed the MediaCreationTool download
>>>>> but it would only burn DVD's. there were no
>>>>> options for the Patriot.
>>>>>
>>>>> https://postimg.cc/tZHsJXTP
>>>>>
>>>>> https://postimg.cc/sv2vvHVn
>>>>>
>>>>> https://postimg.cc/5Q2NQjMH
>>>>>
>>>>> https://postimg.cc/5jstd5w8
>>>>>
>>>>> Then I switched hd again and tried the one labeled bad:
>>>>>
>>>>> https://postimg.cc/G9f1xXFg
>>>>>
>>>>> I put the 780 Win 10 hd back in.
>>>>>
>>>>> I'm broke until the 27th and then I can buy the
>>>>> double sided DVD's.
>>>>>
>>>>>
>>>>> Robert
>>>>>
>>>>
>>>> The first four postimg images, yes, the IMAPI2 (or any other burner
>>>> for that matter), can't put more than about 4,700,000,000
>>>> bytes or so on a single-layer DVD. The numbers are in Wikipedia.
>>>>
>>>> DVD-R SL   4,707,319,808
>>>> DVD+R SL   4,700,372,992
>>>> DVD-R DL   8,543,666,176
>>>> DVD+R DL   8,547,991,552
>>>>
>>>> The Linux version might be well above 4,700 while the
>>>> Windows MediaCreationTool version is just a bit too big.
>>>> Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
>>>> Dual-layer DVD would also work for both.
>>>>
>>>> You don't have to do the following. It's just an illustration of
>>>> how you deal with the too-big DVD, when all you own is single layer media.
>>>>
>>>> It's possible to artificially trim the DVD size down, to make
>>>> it fit. You need a copy of "oscdimg.exe", and when you got the
>>>> Macrium download, it's possible that file would be in there.
>>>> A WADK kit (a long download) would also have it.
>>>>
>>>>      http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E
>>>>
>>>>      md F:\WORK        # make a temporary directory for the work, 20GB slack should be OK
>>>>
>>>>      # Copy the original mounted ISO contents into WORK. This will take a while.
>>>>
>>>>       sources\
>>>>       efi\
>>>>       ...
>>>>       autorun.inf
>>>>
>>>>      # First part of process, works on a specific file in sources\
>>>>
>>>>       F:\WORK\sources\        # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.
>>>>
>>>>      # The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
>>>>      # The three lines of command go onto one command line, with a space between line contents.
>>>>
>>>>       oscdimg ...  F:\WORK   F:\W190364.iso   # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
>>>>                                               # For your work, you'd pick a descriptive name for your new.iso .
>>>>
>>>> *******
>>>>
>>>> For the boot problem, you'd need to do Disk Management analysis
>>>> to see if the partitions are intact. The Macrium "Boot Repair"
>>>> on the CD may work, but only if there isn't severe damage to
>>>> the content on the drive. This could also happen, if you
>>>> attempt to rebuild the boot details, when too many unrelated
>>>> disks are also in the computer. Boot repair should be done
>>>> with just the affected hard drive being the only storage.
>>>>
>>>>      # your boot error
>>>>
>>>>      https://postimg.cc/G9f1xXFg
>>>>
>>>> Note that boot repair does not always work. I've tried and tried
>>>> at various times to fix hard drives, and the repair just does not
>>>> work. So if it does not work, it's not exactly unexpected. But
>>>> it is pleasant when it does decide to work :-)
>>>>
>>>>     Paul
>>>>
>>>
>>>
>>> Do I have this sequence right?
>>>
>>> •    select settings
>>> •    select update/security
>>> •    select recovery - restart now
>>> •    select Troubleshoot
>>> •    select advanced options
>>> •    select start-up settings
>>> •    I load the 780 Win10 Rescue CD
>>> •    in macirum, use CMD prompt to enter commands
>>>
>>> cd Windows\System32
>>> ren sethc.exe sethc.exe.bak
>>> copy cmd.exe sethc .exe
>>>
>>> •    close CMD prompt
>>> •    re- restart to WBM with safe mode 4 (I've never seen those startup settings before)
>>>
>>> There's is no shut down/restart command in macrium. When doing mrimgs I usually
>>> remove the CD from the drive. Then close Macrium and wait for the screen to go black and then pull the USB connection then I get the WBM screen. So I would still close macrium and then when it restarts I could select Safe mode then. Is that what you want me to do?
>>>
>>> I see you have a new account Lowboy your using so will I also have a new account
>>> that I will be using but can I still access the CMD prompt without logging in ?
>>>
>>> •    enter commands
>>>
>>> C:\\WINDOWS\system32>net user TEMP qwertyl  /ADD
>>> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP  /ADD
>>>
>>> •    press shift key 5 times (sticky keys) - opens Admin window, not logged in yet
>>> •    verify account has changed to Administrator
>>> •    re-boot with Rescue media
>>> •    select CMD prompt and enter commands to remove the hack
>>>
>>> C:
>>> cd Windows\System 32
>>> del sethc.exe
>>> ren sethc.exe.bak sethc.exe
>>>
>>>
>>>
>>>
>>> Robert
>>
>> This sequence, needs C: as the first line. You MUST switch to the
>> C: partition, before the other three commands. There are four lines of input.
>> The first line has the two characters in it.
>>
>> C:                                     # This changes to the C: partition
>> cd Windows\System32                    # Current directory is C:\Windows\System32
>> ren sethc.exe sethc.exe.bak            # This renames the original file, for safe keeping
>> copy cmd.exe sethc.exe                 # This places cmd.exe in place of sethc.exe file, as a "fake"
>>
>> *******
>>
>> Macrium does have a selector for shutdown/restart. It's in
>> newer versions of the Macrium Rescue CD. It is the red button
>> in the lower left corner. Clicking it, if there is a selector, it
>> will have as options "Reboot" or "Shutdown" showing in a tiny dialog box.
>> That's where you get to select it.
>>
>> *******
>>
>> When you have the Administrator level window to work in, you can
>> do anything you want. This sequence for example, adds a new account
>> that has administrator rights. This account is TEMP. And the
>> password is "qwerty1".
>>
>>     C:\WINDOWS\system32>    net user TEMP qwertyl  /ADD
>>     C:\WINDOWS\system32>    net LOCALGROUP Administrators TEMP  /ADD
>>
>> You could do a third line at that time, like this. This would
>> add the account "Rob" to the Administrators group. This assumes
>> the "Rob" account already exists. That's why the command only
>> has the one line. "Rob" must exist and be a working account, for this
>> to be worth doing.
>>
>>                             net LOCALGROUP Administrators Rob /ADD
>>
>> See how easy this is ? And how much fun ?
>>
>> Do not be distracted by the accounts showing in my diagram.
>> ("Lowboy" is the unelevated account, I use to "test for handcuffs" in the OS.)
>>
>> What happens to the computer during this procedure, does not "rely" on the account choices.
>> What matters, is entering those commands in the Administrator window.
>>
>> That's why we're doing the hack, is to regain control of the computer
>> so we can do other important work.
>>
>> Once the hack lines are entered, you can type "exit" into the
>> Administrator window, or you can click the "X" in the upper left
>> corner of that window. You can log into any account showing
>> for fun if you want (lower left corner choices). If everything
>> is working, when you reboot the computer, any changes should
>> now be working, and say, the Rob account could have new Administrator privileges.
>> That's what this is for. Getting away from entering some foreign-account PIN.
>> We need an account which you control, to have Administrators privileges.
>>
>>     Paul
>>
>
>
> Do I have this sequence right now?
>
> • select settings
> • select update/security
> • select recovery - restart now
> • select Troubleshoot
> • select advanced options
> • select start-up settings
> • I load the 780 Win10 Rescue CD
> • in macirum, use CMD prompt to enter commands
>
> C:
> cd Windows\System32
> ren sethc.exe sethc.exe.bak
> copy cmd.exe sethc .exe
>
> • close CMD prompt
> • re- restart to WBM with safe mode 4
>
> • at CMD prompt enter commands
>
> C:
> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP /ADD
>
> • press shift key 5 times (sticky keys) - opens Admin window, not logged
> in yet
> • verify account has changed to Administrator
> • re-boot with Rescue media
> • select CMD prompt and enter commands to remove the hack
>
> C:
> cd Windows\System 32
> del sethc.exe
> ren sethc.exe.bak sethc.exe
>
>
>  I can just leave the Rescue CD in when I reboot
> and just not select it or do you think its better I take it
> out before I reboot to the WBM?.
>
>
> Once we have it working as Admin Account I can go into
> the CMD prompt and do
>
> C:
> C:\WINDOWS\system32> net user TEMP qwertyl /ADD
> C:\WINDOWS\system32> net LOCALGROUP Administrators TEMP /ADD
> net LOCALGROUP Administrators Rob /ADD
>
> could I make my own like this as a simple example? What would this do?
>
> C:\WINDOWS\system32> net user Robert abc123 /ADD
>
> Robert

Paul wrote:
> On 12/24/2023 1:33 AM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/23/2023 1:37 PM, Robert in CA wrote:
>>>> Paul wrote:
>>>>> On 12/22/2023 8:00 AM, Robert in CA wrote:
>>>>>> I completed the MediaCreationTool download
>>>>>> but it would only burn DVD's. there were no
>>>>>> options for the Patriot.
>>>>>>
>>>>>> https://postimg.cc/tZHsJXTP
>>>>>>
>>>>>> https://postimg.cc/sv2vvHVn
>>>>>>
>>>>>> https://postimg.cc/5Q2NQjMH
>>>>>>
>>>>>> https://postimg.cc/5jstd5w8
>>>>>>
>>>>>> Then I switched hd again and tried the one labeled bad:
>>>>>>
>>>>>> https://postimg.cc/G9f1xXFg
>>>>>>
>>>>>> I put the 780 Win 10 hd back in.
>>>>>>
>>>>>> I'm broke until the 27th and then I can buy the
>>>>>> double sided DVD's.
>>>>>>
>>>>>>
>>>>>> Robert
>>>>>>
>>>>>
>>>>> The first four postimg images, yes, the IMAPI2 (or any other burner
>>>>> for that matter), can't put more than about 4,700,000,000
>>>>> bytes or so on a single-layer DVD. The numbers are in Wikipedia.
>>>>>
>>>>> DVD-R SL   4,707,319,808
>>>>> DVD+R SL   4,700,372,992
>>>>> DVD-R DL   8,543,666,176
>>>>> DVD+R DL   8,547,991,552
>>>>>
>>>>> The Linux version might be well above 4,700 while the
>>>>> Windows MediaCreationTool version is just a bit too big.
>>>>> Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
>>>>> Dual-layer DVD would also work for both.
>>>>>
>>>>> You don't have to do the following. It's just an illustration of
>>>>> how you deal with the too-big DVD, when all you own is single layer media.
>>>>>
>>>>> It's possible to artificially trim the DVD size down, to make
>>>>> it fit. You need a copy of "oscdimg.exe", and when you got the
>>>>> Macrium download, it's possible that file would be in there.
>>>>> A WADK kit (a long download) would also have it.
>>>>>
>>>>>      http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E
>>>>>
>>>>>      md F:\WORK        # make a temporary directory for the work, 20GB slack should be OK
>>>>>
>>>>>      # Copy the original mounted ISO contents into WORK. This will take a while.
>>>>>
>>>>>       sources\
>>>>>       efi\
>>>>>       ...
>>>>>       autorun.inf
>>>>>
>>>>>      # First part of process, works on a specific file in sources\
>>>>>
>>>>>       F:\WORK\sources\        # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.
>>>>>
>>>>>      # The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
>>>>>      # The three lines of command go onto one command line, with a space between line contents.
>>>>>
>>>>>       oscdimg ...  F:\WORK   F:\W190364.iso   # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
>>>>>                                               # For your work, you'd pick a descriptive name for your new.iso .
>>>>>
>>>>> *******
>>>>>
>>>>> For the boot problem, you'd need to do Disk Management analysis
>>>>> to see if the partitions are intact. The Macrium "Boot Repair"
>>>>> on the CD may work, but only if there isn't severe damage to
>>>>> the content on the drive. This could also happen, if you
>>>>> attempt to rebuild the boot details, when too many unrelated
>>>>> disks are also in the computer. Boot repair should be done
>>>>> with just the affected hard drive being the only storage.
>>>>>
>>>>>      # your boot error
>>>>>
>>>>>      https://postimg.cc/G9f1xXFg
>>>>>
>>>>> Note that boot repair does not always work. I've tried and tried
>>>>> at various times to fix hard drives, and the repair just does not
>>>>> work. So if it does not work, it's not exactly unexpected. But
>>>>> it is pleasant when it does decide to work :-)
>>>>>
>>>>>     Paul
>>>>>
>>>>
>>>>
>>>> Do I have this sequence right?
>>>>
>>>> •    select settings
>>>> •    select update/security
>>>> •    select recovery - restart now
>>>> •    select Troubleshoot
>>>> •    select advanced options
>>>> •    select start-up settings
>>>> •    I load the 780 Win10 Rescue CD
>>>> •    in macirum, use CMD prompt to enter commands
>>>>
>>>> cd Windows\System32
>>>> ren sethc.exe sethc.exe.bak
>>>> copy cmd.exe sethc .exe
>>>>
>>>> •    close CMD prompt
>>>> •    re- restart to WBM with safe mode 4 (I've never seen those startup settings before)
>>>>
>>>> There's is no shut down/restart command in macrium. When doing mrimgs I usually
>>>> remove the CD from the drive. Then close Macrium and wait for the screen to go black and then pull the USB connection then I get the WBM screen. So I would still close macrium and then when it restarts I could select Safe mode then. Is that what you want me to do?
>>>>
>>>> I see you have a new account Lowboy your using so will I also have a new account
>>>> that I will be using but can I still access the CMD prompt without logging in ?
>>>>
>>>> •    enter commands
>>>>
>>>> C:\\WINDOWS\system32>net user TEMP qwertyl  /ADD
>>>> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP  /ADD
>>>>
>>>> •    press shift key 5 times (sticky keys) - opens Admin window, not logged in yet
>>>> •    verify account has changed to Administrator
>>>> •    re-boot with Rescue media
>>>> •    select CMD prompt and enter commands to remove the hack
>>>>
>>>> C:
>>>> cd Windows\System 32
>>>> del sethc.exe
>>>> ren sethc.exe.bak sethc.exe
>>>>
>>>>
>>>>
>>>>
>>>> Robert
>>>
>>> This sequence, needs C: as the first line. You MUST switch to the
>>> C: partition, before the other three commands. There are four lines of input.
>>> The first line has the two characters in it.
>>>
>>> C:                                     # This changes to the C: partition
>>> cd Windows\System32                    # Current directory is C:\Windows\System32
>>> ren sethc.exe sethc.exe.bak            # This renames the original file, for safe keeping
>>> copy cmd.exe sethc.exe                 # This places cmd.exe in place of sethc.exe file, as a "fake"
>>>
>>> *******
>>>
>>> Macrium does have a selector for shutdown/restart. It's in
>>> newer versions of the Macrium Rescue CD. It is the red button
>>> in the lower left corner. Clicking it, if there is a selector, it
>>> will have as options "Reboot" or "Shutdown" showing in a tiny dialog box.
>>> That's where you get to select it.
>>>
>>> *******
>>>
>>> When you have the Administrator level window to work in, you can
>>> do anything you want. This sequence for example, adds a new account
>>> that has administrator rights. This account is TEMP. And the
>>> password is "qwerty1".
>>>
>>>     C:\WINDOWS\system32>    net user TEMP qwertyl  /ADD
>>>     C:\WINDOWS\system32>    net LOCALGROUP Administrators TEMP  /ADD
>>>
>>> You could do a third line at that time, like this. This would
>>> add the account "Rob" to the Administrators group. This assumes
>>> the "Rob" account already exists. That's why the command only
>>> has the one line. "Rob" must exist and be a working account, for this
>>> to be worth doing.
>>>
>>>                             net LOCALGROUP Administrators Rob /ADD
>>>
>>> See how easy this is ? And how much fun ?
>>>
>>> Do not be distracted by the accounts showing in my diagram.
>>> ("Lowboy" is the unelevated account, I use to "test for handcuffs" in the OS.)
>>>
>>> What happens to the computer during this procedure, does not "rely" on the account choices.
>>> What matters, is entering those commands in the Administrator window.
>>>
>>> That's why we're doing the hack, is to regain control of the computer
>>> so we can do other important work.
>>>
>>> Once the hack lines are entered, you can type "exit" into the
>>> Administrator window, or you can click the "X" in the upper left
>>> corner of that window. You can log into any account showing
>>> for fun if you want (lower left corner choices). If everything
>>> is working, when you reboot the computer, any changes should
>>> now be working, and say, the Rob account could have new Administrator privileges.
>>> That's what this is for. Getting away from entering some foreign-account PIN.
>>> We need an account which you control, to have Administrators privileges.
>>>
>>>     Paul
>>>
>>
>>
>> Do I have this sequence right now?
>>
>> • select settings
>> • select update/security
>> • select recovery - restart now
>> • select Troubleshoot
>> • select advanced options
>> • select start-up settings
>> • I load the 780 Win10 Rescue CD
>> • in macirum, use CMD prompt to enter commands
>>
>> C:
>> cd Windows\System32
>> ren sethc.exe sethc.exe.bak
>> copy cmd.exe sethc .exe
>>
>> • close CMD prompt
>> • re- restart to WBM with safe mode 4
>>
>> • at CMD prompt enter commands
>>
>> C:
>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP /ADD
>>
>> • press shift key 5 times (sticky keys) - opens Admin window, not logged
>> in yet
>> • verify account has changed to Administrator
>> • re-boot with Rescue media
>> • select CMD prompt and enter commands to remove the hack
>>
>> C:
>> cd Windows\System 32
>> del sethc.exe
>> ren sethc.exe.bak sethc.exe
>>
>>
>>  I can just leave the Rescue CD in when I reboot
>> and just not select it or do you think its better I take it
>> out before I reboot to the WBM?.
>>
>>
>> Once we have it working as Admin Account I can go into
>> the CMD prompt and do
>>
>> C:
>> C:\WINDOWS\system32> net user TEMP qwertyl /ADD
>> C:\WINDOWS\system32> net LOCALGROUP Administrators TEMP /ADD
>> net LOCALGROUP Administrators Rob /ADD
>>
>> could I make my own like this as a simple example? What would this do?
>>
>> C:\WINDOWS\system32> net user Robert abc123 /ADD
>>
>> Robert
>
> That last command, makes an un-elevated user Robert.
> You need a second line after it, so it is elevated.
>
> net user Robert abc123 /ADD # Create Robert account with password abc123
>
> net LOCALGROUP Administrators Robert /ADD # Add Robert to the Administrators group
>
> And be careful of your syntax, OK ?
> No more of those excess space characters.
>
> This part of the command, is already on the screen.
> It's the "prompt" and it shows the current working directory, then a greater-than symbol.
> You don't type this part.
>
> C:\WINDOWS\system32>
>
> The letters you type, are this much.
>
> net user Robert abc123 /ADD
> net LOCALGROUP Administrators Robert /ADD
>
> Those commands do not have any particular dependency on the working directory.
>
> However, the Macrium file copy work, it *does* depend on the working directory
> being done correctly. The Macrium environment boots to X: and then
> we have to change the Macrium path to C: to get the commands carried
> out on the C: drive. (The X: directory is transient, and it disappears
> as soon as Macrium is shut down. Whereas C: is always with us.)
>
> Paul
>

Paul wrote:
> On 12/24/2023 1:33 AM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/23/2023 1:37 PM, Robert in CA wrote:
>>>> Paul wrote:
>>>>> On 12/22/2023 8:00 AM, Robert in CA wrote:
>>>>>> I completed the MediaCreationTool download
>>>>>> but it would only burn DVD's. there were no
>>>>>> options for the Patriot.
>>>>>>
>>>>>> https://postimg.cc/tZHsJXTP
>>>>>>
>>>>>> https://postimg.cc/sv2vvHVn
>>>>>>
>>>>>> https://postimg.cc/5Q2NQjMH
>>>>>>
>>>>>> https://postimg.cc/5jstd5w8
>>>>>>
>>>>>> Then I switched hd again and tried the one labeled bad:
>>>>>>
>>>>>> https://postimg.cc/G9f1xXFg
>>>>>>
>>>>>> I put the 780 Win 10 hd back in.
>>>>>>
>>>>>> I'm broke until the 27th and then I can buy the
>>>>>> double sided DVD's.
>>>>>>
>>>>>>
>>>>>> Robert
>>>>>>
>>>>>
>>>>> The first four postimg images, yes, the IMAPI2 (or any other burner
>>>>> for that matter), can't put more than about 4,700,000,000
>>>>> bytes or so on a single-layer DVD. The numbers are in Wikipedia.
>>>>>
>>>>> DVD-R SL   4,707,319,808
>>>>> DVD+R SL   4,700,372,992
>>>>> DVD-R DL   8,543,666,176
>>>>> DVD+R DL   8,547,991,552
>>>>>
>>>>> The Linux version might be well above 4,700 while the
>>>>> Windows MediaCreationTool version is just a bit too big.
>>>>> Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
>>>>> Dual-layer DVD would also work for both.
>>>>>
>>>>> You don't have to do the following. It's just an illustration of
>>>>> how you deal with the too-big DVD, when all you own is single layer media.
>>>>>
>>>>> It's possible to artificially trim the DVD size down, to make
>>>>> it fit. You need a copy of "oscdimg.exe", and when you got the
>>>>> Macrium download, it's possible that file would be in there.
>>>>> A WADK kit (a long download) would also have it.
>>>>>
>>>>>      http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E
>>>>>
>>>>>      md F:\WORK        # make a temporary directory for the work, 20GB slack should be OK
>>>>>
>>>>>      # Copy the original mounted ISO contents into WORK. This will take a while.
>>>>>
>>>>>       sources\
>>>>>       efi\
>>>>>       ...
>>>>>       autorun.inf
>>>>>
>>>>>      # First part of process, works on a specific file in sources\
>>>>>
>>>>>       F:\WORK\sources\        # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.
>>>>>
>>>>>      # The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
>>>>>      # The three lines of command go onto one command line, with a space between line contents.
>>>>>
>>>>>       oscdimg ...  F:\WORK   F:\W190364.iso   # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
>>>>>                                               # For your work, you'd pick a descriptive name for your new.iso .
>>>>>
>>>>> *******
>>>>>
>>>>> For the boot problem, you'd need to do Disk Management analysis
>>>>> to see if the partitions are intact. The Macrium "Boot Repair"
>>>>> on the CD may work, but only if there isn't severe damage to
>>>>> the content on the drive. This could also happen, if you
>>>>> attempt to rebuild the boot details, when too many unrelated
>>>>> disks are also in the computer. Boot repair should be done
>>>>> with just the affected hard drive being the only storage.
>>>>>
>>>>>      # your boot error
>>>>>
>>>>>      https://postimg.cc/G9f1xXFg
>>>>>
>>>>> Note that boot repair does not always work. I've tried and tried
>>>>> at various times to fix hard drives, and the repair just does not
>>>>> work. So if it does not work, it's not exactly unexpected. But
>>>>> it is pleasant when it does decide to work :-)
>>>>>
>>>>>     Paul
>>>>>
>>>>
>>>>
>>>> Do I have this sequence right?
>>>>
>>>> •    select settings
>>>> •    select update/security
>>>> •    select recovery - restart now
>>>> •    select Troubleshoot
>>>> •    select advanced options
>>>> •    select start-up settings
>>>> •    I load the 780 Win10 Rescue CD
>>>> •    in macirum, use CMD prompt to enter commands
>>>>
>>>> cd Windows\System32
>>>> ren sethc.exe sethc.exe.bak
>>>> copy cmd.exe sethc .exe
>>>>
>>>> •    close CMD prompt
>>>> •    re- restart to WBM with safe mode 4 (I've never seen those startup settings before)
>>>>
>>>> There's is no shut down/restart command in macrium. When doing mrimgs I usually
>>>> remove the CD from the drive. Then close Macrium and wait for the screen to go black and then pull the USB connection then I get the WBM screen. So I would still close macrium and then when it restarts I could select Safe mode then. Is that what you want me to do?
>>>>
>>>> I see you have a new account Lowboy your using so will I also have a new account
>>>> that I will be using but can I still access the CMD prompt without logging in ?
>>>>
>>>> •    enter commands
>>>>
>>>> C:\\WINDOWS\system32>net user TEMP qwertyl  /ADD
>>>> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP  /ADD
>>>>
>>>> •    press shift key 5 times (sticky keys) - opens Admin window, not logged in yet
>>>> •    verify account has changed to Administrator
>>>> •    re-boot with Rescue media
>>>> •    select CMD prompt and enter commands to remove the hack
>>>>
>>>> C:
>>>> cd Windows\System 32
>>>> del sethc.exe
>>>> ren sethc.exe.bak sethc.exe
>>>>
>>>>
>>>>
>>>>
>>>> Robert
>>>
>>> This sequence, needs C: as the first line. You MUST switch to the
>>> C: partition, before the other three commands. There are four lines of input.
>>> The first line has the two characters in it.
>>>
>>> C:                                     # This changes to the C: partition
>>> cd Windows\System32                    # Current directory is C:\Windows\System32
>>> ren sethc.exe sethc.exe.bak            # This renames the original file, for safe keeping
>>> copy cmd.exe sethc.exe                 # This places cmd.exe in place of sethc.exe file, as a "fake"
>>>
>>> *******
>>>
>>> Macrium does have a selector for shutdown/restart. It's in
>>> newer versions of the Macrium Rescue CD. It is the red button
>>> in the lower left corner. Clicking it, if there is a selector, it
>>> will have as options "Reboot" or "Shutdown" showing in a tiny dialog box.
>>> That's where you get to select it.
>>>
>>> *******
>>>
>>> When you have the Administrator level window to work in, you can
>>> do anything you want. This sequence for example, adds a new account
>>> that has administrator rights. This account is TEMP. And the
>>> password is "qwerty1".
>>>
>>>     C:\WINDOWS\system32>    net user TEMP qwertyl  /ADD
>>>     C:\WINDOWS\system32>    net LOCALGROUP Administrators TEMP  /ADD
>>>
>>> You could do a third line at that time, like this. This would
>>> add the account "Rob" to the Administrators group. This assumes
>>> the "Rob" account already exists. That's why the command only
>>> has the one line. "Rob" must exist and be a working account, for this
>>> to be worth doing.
>>>
>>>                             net LOCALGROUP Administrators Rob /ADD
>>>
>>> See how easy this is ? And how much fun ?
>>>
>>> Do not be distracted by the accounts showing in my diagram.
>>> ("Lowboy" is the unelevated account, I use to "test for handcuffs" in the OS.)
>>>
>>> What happens to the computer during this procedure, does not "rely" on the account choices.
>>> What matters, is entering those commands in the Administrator window.
>>>
>>> That's why we're doing the hack, is to regain control of the computer
>>> so we can do other important work.
>>>
>>> Once the hack lines are entered, you can type "exit" into the
>>> Administrator window, or you can click the "X" in the upper left
>>> corner of that window. You can log into any account showing
>>> for fun if you want (lower left corner choices). If everything
>>> is working, when you reboot the computer, any changes should
>>> now be working, and say, the Rob account could have new Administrator privileges.
>>> That's what this is for. Getting away from entering some foreign-account PIN.
>>> We need an account which you control, to have Administrators privileges.
>>>
>>>     Paul
>>>
>>
>>
>> Do I have this sequence right now?
>>
>> • select settings
>> • select update/security
>> • select recovery - restart now
>> • select Troubleshoot
>> • select advanced options
>> • select start-up settings
>> • I load the 780 Win10 Rescue CD
>> • in macirum, use CMD prompt to enter commands
>>
>> C:
>> cd Windows\System32
>> ren sethc.exe sethc.exe.bak
>> copy cmd.exe sethc .exe
>>
>> • close CMD prompt
>> • re- restart to WBM with safe mode 4
>>
>> • at CMD prompt enter commands
>>
>> C:
>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP /ADD
>>
>> • press shift key 5 times (sticky keys) - opens Admin window, not logged
>> in yet
>> • verify account has changed to Administrator
>> • re-boot with Rescue media
>> • select CMD prompt and enter commands to remove the hack
>>
>> C:
>> cd Windows\System 32
>> del sethc.exe
>> ren sethc.exe.bak sethc.exe
>>
>>
>>  I can just leave the Rescue CD in when I reboot
>> and just not select it or do you think its better I take it
>> out before I reboot to the WBM?.
>>
>>
>> Once we have it working as Admin Account I can go into
>> the CMD prompt and do
>>
>> C:
>> C:\WINDOWS\system32> net user TEMP qwertyl /ADD
>> C:\WINDOWS\system32> net LOCALGROUP Administrators TEMP /ADD
>> net LOCALGROUP Administrators Rob /ADD
>>
>> could I make my own like this as a simple example? What would this do?
>>
>> C:\WINDOWS\system32> net user Robert abc123 /ADD
>>
>> Robert
>
> That last command, makes an un-elevated user Robert.
> You need a second line after it, so it is elevated.
>
> net user Robert abc123 /ADD # Create Robert account with password abc123
>
> net LOCALGROUP Administrators Robert /ADD # Add Robert to the Administrators group
>
> And be careful of your syntax, OK ?
> No more of those excess space characters.
>
> This part of the command, is already on the screen.
> It's the "prompt" and it shows the current working directory, then a greater-than symbol.
> You don't type this part.
>
> C:\WINDOWS\system32>
>
> The letters you type, are this much.
>
> net user Robert abc123 /ADD
> net LOCALGROUP Administrators Robert /ADD
>
> Those commands do not have any particular dependency on the working directory.
>
> However, the Macrium file copy work, it *does* depend on the working directory
> being done correctly. The Macrium environment boots to X: and then
> we have to change the Macrium path to C: to get the commands carried
> out on the C: drive. (The X: directory is transient, and it disappears
> as soon as Macrium is shut down. Whereas C: is always with us.)
>
> Paul
>

Paul wrote:
> On 12/24/2023 1:33 AM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/23/2023 1:37 PM, Robert in CA wrote:
>>>> Paul wrote:
>>>>> On 12/22/2023 8:00 AM, Robert in CA wrote:
>>>>>> I completed the MediaCreationTool download
>>>>>> but it would only burn DVD's. there were no
>>>>>> options for the Patriot.
>>>>>>
>>>>>> https://postimg.cc/tZHsJXTP
>>>>>>
>>>>>> https://postimg.cc/sv2vvHVn
>>>>>>
>>>>>> https://postimg.cc/5Q2NQjMH
>>>>>>
>>>>>> https://postimg.cc/5jstd5w8
>>>>>>
>>>>>> Then I switched hd again and tried the one labeled bad:
>>>>>>
>>>>>> https://postimg.cc/G9f1xXFg
>>>>>>
>>>>>> I put the 780 Win 10 hd back in.
>>>>>>
>>>>>> I'm broke until the 27th and then I can buy the
>>>>>> double sided DVD's.
>>>>>>
>>>>>>
>>>>>> Robert
>>>>>>
>>>>>
>>>>> The first four postimg images, yes, the IMAPI2 (or any other burner
>>>>> for that matter), can't put more than about 4,700,000,000
>>>>> bytes or so on a single-layer DVD. The numbers are in Wikipedia.
>>>>>
>>>>> DVD-R SL   4,707,319,808
>>>>> DVD+R SL   4,700,372,992
>>>>> DVD-R DL   8,543,666,176
>>>>> DVD+R DL   8,547,991,552
>>>>>
>>>>> The Linux version might be well above 4,700 while the
>>>>> Windows MediaCreationTool version is just a bit too big.
>>>>> Both of them would fit on a Patriot stick of 8GB size using rufus.ie .
>>>>> Dual-layer DVD would also work for both.
>>>>>
>>>>> You don't have to do the following. It's just an illustration of
>>>>> how you deal with the too-big DVD, when all you own is single layer media.
>>>>>
>>>>> It's possible to artificially trim the DVD size down, to make
>>>>> it fit. You need a copy of "oscdimg.exe", and when you got the
>>>>> Macrium download, it's possible that file would be in there.
>>>>> A WADK kit (a long download) would also have it.
>>>>>
>>>>>      http://al.howardknight.net/?STYPE=msgid&MSGI=%3Cqcf19p%242ej%241%40dont-email.me%3E
>>>>>
>>>>>      md F:\WORK        # make a temporary directory for the work, 20GB slack should be OK
>>>>>
>>>>>      # Copy the original mounted ISO contents into WORK. This will take a while.
>>>>>
>>>>>       sources\
>>>>>       efi\
>>>>>       ...
>>>>>       autorun.inf
>>>>>
>>>>>      # First part of process, works on a specific file in sources\
>>>>>
>>>>>       F:\WORK\sources\        # The Export-Image stuff, this makes a smaller WIM file, key to the procedure.
>>>>>
>>>>>      # The oscdimg part, it uses the contents of F:\WORK to make F:\new.iso kind of thing.
>>>>>      # The three lines of command go onto one command line, with a space between line contents.
>>>>>
>>>>>       oscdimg ...  F:\WORK   F:\W190364.iso   # A new, smaller DVD W190364.iso, with only Windows 10 Pro in it.
>>>>>                                               # For your work, you'd pick a descriptive name for your new.iso .
>>>>>
>>>>> *******
>>>>>
>>>>> For the boot problem, you'd need to do Disk Management analysis
>>>>> to see if the partitions are intact. The Macrium "Boot Repair"
>>>>> on the CD may work, but only if there isn't severe damage to
>>>>> the content on the drive. This could also happen, if you
>>>>> attempt to rebuild the boot details, when too many unrelated
>>>>> disks are also in the computer. Boot repair should be done
>>>>> with just the affected hard drive being the only storage.
>>>>>
>>>>>      # your boot error
>>>>>
>>>>>      https://postimg.cc/G9f1xXFg
>>>>>
>>>>> Note that boot repair does not always work. I've tried and tried
>>>>> at various times to fix hard drives, and the repair just does not
>>>>> work. So if it does not work, it's not exactly unexpected. But
>>>>> it is pleasant when it does decide to work :-)
>>>>>
>>>>>     Paul
>>>>>
>>>>
>>>>
>>>> Do I have this sequence right?
>>>>
>>>> •    select settings
>>>> •    select update/security
>>>> •    select recovery - restart now
>>>> •    select Troubleshoot
>>>> •    select advanced options
>>>> •    select start-up settings
>>>> •    I load the 780 Win10 Rescue CD
>>>> •    in macirum, use CMD prompt to enter commands
>>>>
>>>> cd Windows\System32
>>>> ren sethc.exe sethc.exe.bak
>>>> copy cmd.exe sethc .exe
>>>>
>>>> •    close CMD prompt
>>>> •    re- restart to WBM with safe mode 4 (I've never seen those startup settings before)
>>>>
>>>> There's is no shut down/restart command in macrium. When doing mrimgs I usually
>>>> remove the CD from the drive. Then close Macrium and wait for the screen to go black and then pull the USB connection then I get the WBM screen. So I would still close macrium and then when it restarts I could select Safe mode then. Is that what you want me to do?
>>>>
>>>> I see you have a new account Lowboy your using so will I also have a new account
>>>> that I will be using but can I still access the CMD prompt without logging in ?
>>>>
>>>> •    enter commands
>>>>
>>>> C:\\WINDOWS\system32>net user TEMP qwertyl  /ADD
>>>> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP  /ADD
>>>>
>>>> •    press shift key 5 times (sticky keys) - opens Admin window, not logged in yet
>>>> •    verify account has changed to Administrator
>>>> •    re-boot with Rescue media
>>>> •    select CMD prompt and enter commands to remove the hack
>>>>
>>>> C:
>>>> cd Windows\System 32
>>>> del sethc.exe
>>>> ren sethc.exe.bak sethc.exe
>>>>
>>>>
>>>>
>>>>
>>>> Robert
>>>
>>> This sequence, needs C: as the first line. You MUST switch to the
>>> C: partition, before the other three commands. There are four lines of input.
>>> The first line has the two characters in it.
>>>
>>> C:                                     # This changes to the C: partition
>>> cd Windows\System32                    # Current directory is C:\Windows\System32
>>> ren sethc.exe sethc.exe.bak            # This renames the original file, for safe keeping
>>> copy cmd.exe sethc.exe                 # This places cmd.exe in place of sethc.exe file, as a "fake"
>>>
>>> *******
>>>
>>> Macrium does have a selector for shutdown/restart. It's in
>>> newer versions of the Macrium Rescue CD. It is the red button
>>> in the lower left corner. Clicking it, if there is a selector, it
>>> will have as options "Reboot" or "Shutdown" showing in a tiny dialog box.
>>> That's where you get to select it.
>>>
>>> *******
>>>
>>> When you have the Administrator level window to work in, you can
>>> do anything you want. This sequence for example, adds a new account
>>> that has administrator rights. This account is TEMP. And the
>>> password is "qwerty1".
>>>
>>>     C:\WINDOWS\system32>    net user TEMP qwertyl  /ADD
>>>     C:\WINDOWS\system32>    net LOCALGROUP Administrators TEMP  /ADD
>>>
>>> You could do a third line at that time, like this. This would
>>> add the account "Rob" to the Administrators group. This assumes
>>> the "Rob" account already exists. That's why the command only
>>> has the one line. "Rob" must exist and be a working account, for this
>>> to be worth doing.
>>>
>>>                             net LOCALGROUP Administrators Rob /ADD
>>>
>>> See how easy this is ? And how much fun ?
>>>
>>> Do not be distracted by the accounts showing in my diagram.
>>> ("Lowboy" is the unelevated account, I use to "test for handcuffs" in the OS.)
>>>
>>> What happens to the computer during this procedure, does not "rely" on the account choices.
>>> What matters, is entering those commands in the Administrator window.
>>>
>>> That's why we're doing the hack, is to regain control of the computer
>>> so we can do other important work.
>>>
>>> Once the hack lines are entered, you can type "exit" into the
>>> Administrator window, or you can click the "X" in the upper left
>>> corner of that window. You can log into any account showing
>>> for fun if you want (lower left corner choices). If everything
>>> is working, when you reboot the computer, any changes should
>>> now be working, and say, the Rob account could have new Administrator privileges.
>>> That's what this is for. Getting away from entering some foreign-account PIN.
>>> We need an account which you control, to have Administrators privileges.
>>>
>>>     Paul
>>>
>>
>>
>> Do I have this sequence right now?
>>
>> • select settings
>> • select update/security
>> • select recovery - restart now
>> • select Troubleshoot
>> • select advanced options
>> • select start-up settings
>> • I load the 780 Win10 Rescue CD
>> • in macirum, use CMD prompt to enter commands
>>
>> C:
>> cd Windows\System32
>> ren sethc.exe sethc.exe.bak
>> copy cmd.exe sethc .exe
>>
>> • close CMD prompt
>> • re- restart to WBM with safe mode 4
>>
>> • at CMD prompt enter commands
>>
>> C:
>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>> C:\\WINDOWS\system32>net LOCAL GROUP Administrators TEMP /ADD
>>
>> • press shift key 5 times (sticky keys) - opens Admin window, not logged
>> in yet
>> • verify account has changed to Administrator
>> • re-boot with Rescue media
>> • select CMD prompt and enter commands to remove the hack
>>
>> C:
>> cd Windows\System 32
>> del sethc.exe
>> ren sethc.exe.bak sethc.exe
>>
>>
>>  I can just leave the Rescue CD in when I reboot
>> and just not select it or do you think its better I take it
>> out before I reboot to the WBM?.
>>
>>
>> Once we have it working as Admin Account I can go into
>> the CMD prompt and do
>>
>> C:
>> C:\WINDOWS\system32> net user TEMP qwertyl /ADD
>> C:\WINDOWS\system32> net LOCALGROUP Administrators TEMP /ADD
>> net LOCALGROUP Administrators Rob /ADD
>>
>> could I make my own like this as a simple example? What would this do?
>>
>> C:\WINDOWS\system32> net user Robert abc123 /ADD
>>
>> Robert
>
> That last command, makes an un-elevated user Robert.
> You need a second line after it, so it is elevated.
>
> net user Robert abc123 /ADD # Create Robert account with password abc123
>
> net LOCALGROUP Administrators Robert /ADD # Add Robert to the Administrators group
>
> And be careful of your syntax, OK ?
> No more of those excess space characters.
>
> This part of the command, is already on the screen.
> It's the "prompt" and it shows the current working directory, then a greater-than symbol.
> You don't type this part.
>
> C:\WINDOWS\system32>
>
> The letters you type, are this much.
>
> net user Robert abc123 /ADD
> net LOCALGROUP Administrators Robert /ADD
>
> Those commands do not have any particular dependency on the working directory.
>
> However, the Macrium file copy work, it *does* depend on the working directory
> being done correctly. The Macrium environment boots to X: and then
> we have to change the Macrium path to C: to get the commands carried
> out on the C: drive. (The X: directory is transient, and it disappears
> as soon as Macrium is shut down. Whereas C: is always with us.)
>
> Paul
>

On 12/24/2023 2:51 AM, Robert in CA wrote:

>
> I also got this error on the newsgroup.
> I've gotten a couple like this.
>
>
> https://postimg.cc/V5cbBR0n
>
> Robert

Paganini likely has defensive measures, and something your
client is doing may have triggered it. Or, another theory
would be, it is something related to the SeaMonkey code.

Modern INN servers, they use transient connections. The
client makes a connection, carries out a few commands, and the
server drops the connection.

This is unlike in the old days, where a news client would stay
connected for fifteen minutes perhaps, before a connection would
drop.

This method allows the server to support more connections, because
each connection has a short holding time.

If you violate one of the service rules (say, more than 1200
connections a day, more than so many posted messages), then one
of these free servers can block your IP for a whole day.

Some servers lack a web page, so you can hardly guess how
they work in that case.

I've never had a problem with that sort of thing, and it is
hard to debug a problem like that unless it is reproducible.

The news client should do a few things, before popping a 10060.
It should be verifying the connection is up or down, if the
connection is down, it repeats the authentication procedure and
brings the connection back up. Well, this server has no authentication
procedure. But you do have to issue commands in a certain order
to make the server work. On the first access, the server may
return a 200 status. And then more commands can be issued, to
update the message lists. So rather than authentication, it
would at least have to do the preamble again, in order to honor
the command you're trying to run (which might be a POST attempt).

Since you're on Port 119 (Plaintext) on the server, you could use
Wireshark to watch the network protocol. That's how I learned what
the messages look like. Portions of them are in plain text and
you can figure out how it is going, by watching the text. I'm not
expecting you to do that, but that's just so you know what the
analysis would be like. It would be Wireshark. And that works on
Port 119. If it was another port number, like 563, then you couldn't
follow along.

Paul

On 12/24/2023 2:48 AM, Robert in CA wrote:

> I tried it and everything went OK until the end where
> I had to sign-in because it had no CMD prompt access
> at that point.
>
> https://postimg.cc/qh3gXfQ2
>
> https://postimg.cc/MvWKXjk7
>
> https://postimg.cc/hf5hXb9k
>
> https://postimg.cc/XpG4zMCP
>
> https://postimg.cc/HJ3qL3M5
>
> https://postimg.cc/1VF7DK8v
>
> https://postimg.cc/v4hq7Tmw
>
> https://postimg.cc/zbs0DRxK
>
> https://postimg.cc/z3hxt0fj
>
> https://postimg.cc/KkPJz8wW
>
> https://postimg.cc/RNk6PLNc
>
>
> So what do I do now?
>
> Robert

https://postimg.cc/RNk6PLNc

In big red letters in the diagram, it said to
hit the shift key five times in succession, which would
cause the Sticky Keys to trigger, opening the "fake"
sethc.exe we made, which is actually cmd.exe .

Did you undo the modifications to sethc ?
Did you rename sethc.exe.bak to sethc.exe ?

If you haven't undone the settings, you can do the
Safe Mode procedure again, bring yourself back to this point

https://postimg.cc/RNk6PLNc

and hit the shift key five times WITHOUT logging in first.
When the login screen appears, it is ready to be attacked
with the five hits on the shift key.

Once the administrator account opens, you can define
whatever administrator account you want.

Remember, the important parts of this procedure, require
no authentication at all. Once you're in the administrator
window, you can do whatever work needs to be done. If you need
to reset the password on the Rob account, you could undoubtedly do it there.

new user Rob thisismynewpassword

You can see a user here, gets a bit confused about what
account he changed the password on. He changed the
password of the "Real Administrator" account, instead of
the password on his personal account. The helper showed
him at the end of the thread, he should have modded his personal
account if he was locked out.

https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e

I don't know if your Rob password is working right now. If
the password on Rob account is working, then there is no need
to change it right away.

Remember, our mission is to make "ONE FULLY WORKING ACCOUNT
BELONGING TO ADMINISTRATORS GROUP". We need to get a foot into
the door. Any other maintenance can be done from the jacked account.

For example, with the TEMP account I made as my example, I could
delete the Lowboy and Earnest accounts, and clean up the machine.
Once I'm in, and I'm the boss :-)

Making the Rob account a member of Administrators is nice, but
if the password is not working, our mission is a failure. We
need to make at least one, fully working account. Even if the
account has a password of qwerty1 or 123456, write the password
down so you won't forget it.

Paul

On 12/24/2023 3:29 AM, Robert in CA wrote:

> I don't understand where I get the CMD prompt after
> pressing:
>
> re- restart to WBM with safe mode 4
>
> It just restarted normally but didn't give me any CMD
> prompt options. Up till that point it worked according to
> your instructions.
>
> Was I suppose to put in the Rescue media before pressing 4
> and then select it when it restarted? Then select the CMD
> prompt from macrium?
>
> Robert

When the Safe Mode login screen appears, you press the
Shift key five times. A Command Prompt window will magically appear.

Remember, this is the "hack step" :-) This is the thing Microsoft
didn't want to happen. You press the Shift key five times, the
administrator window opens, no login procedure, no password, nothing.

Then you get to work, and carry out your devious hacker plan
for machine control.

MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.

If the password for Rob is working, then you won't need to
reset the Rob password, while you are there. The very last line
the helper used at the bottom of this, demonstrates how the
daily driver account, has its password reset. So not only
can you use LOCALGROUP to make Rob an Administrators group member.
You can also reset the password there, if resetting the password
is absolutely necessary.

https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e

Plan your mission, collect the set of commands needed for the
mission, then it's back to the Safe Mode procedure, to get the
machine ready for the attack. In Safe Mode, Windows Defender
cannot stop you. When the Safe Mode login appears, hit the
SHift key five times. Shazam. You're the administrator.

Paul

Paul wrote:
> On 12/24/2023 2:51 AM, Robert in CA wrote:
>
>>
>> I also got this error on the newsgroup.
>> I've gotten a couple like this.
>>
>>
>> https://postimg.cc/V5cbBR0n
>>
>> Robert
>
> Paganini likely has defensive measures, and something your
> client is doing may have triggered it. Or, another theory
> would be, it is something related to the SeaMonkey code.
>
> Modern INN servers, they use transient connections. The
> client makes a connection, carries out a few commands, and the
> server drops the connection.
>
> This is unlike in the old days, where a news client would stay
> connected for fifteen minutes perhaps, before a connection would
> drop.
>
> This method allows the server to support more connections, because
> each connection has a short holding time.
>
> If you violate one of the service rules (say, more than 1200
> connections a day, more than so many posted messages), then one
> of these free servers can block your IP for a whole day.
>
> Some servers lack a web page, so you can hardly guess how
> they work in that case.
>
> I've never had a problem with that sort of thing, and it is
> hard to debug a problem like that unless it is reproducible.
>
> The news client should do a few things, before popping a 10060.
> It should be verifying the connection is up or down, if the
> connection is down, it repeats the authentication procedure and
> brings the connection back up. Well, this server has no authentication
> procedure. But you do have to issue commands in a certain order
> to make the server work. On the first access, the server may
> return a 200 status. And then more commands can be issued, to
> update the message lists. So rather than authentication, it
> would at least have to do the preamble again, in order to honor
> the command you're trying to run (which might be a POST attempt).
>
> Since you're on Port 119 (Plaintext) on the server, you could use
> Wireshark to watch the network protocol. That's how I learned what
> the messages look like. Portions of them are in plain text and
> you can figure out how it is going, by watching the text. I'm not
> expecting you to do that, but that's just so you know what the
> analysis would be like. It would be Wireshark. And that works on
> Port 119. If it was another port number, like 563, then you couldn't
> follow along.
>
> Paul
>
>

I tried to finish the procedure by using the Rescue media
to access the CMD prompt. I did the first command wrong but
the second time it also rejected it.

https://postimg.cc/7C5XrVqm

I also got one of the error messages again before I posted
this.

Thoughts/suggestions?
Robert

_

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

Paul wrote:
> On 12/24/2023 3:29 AM, Robert in CA wrote:
>
>
>> I don't understand where I get the CMD prompt after
>> pressing:
>>
>> re- restart to WBM with safe mode 4
>>
>> It just restarted normally but didn't give me any CMD
>> prompt options. Up till that point it worked according to
>> your instructions.
>>
>> Was I suppose to put in the Rescue media before pressing 4
>> and then select it when it restarted? Then select the CMD
>> prompt from macrium?
>>
>> Robert
>
> When the Safe Mode login screen appears, you press the
> Shift key five times. A Command Prompt window will magically appear.
>
> Remember, this is the "hack step" :-) This is the thing Microsoft
> didn't want to happen. You press the Shift key five times, the
> administrator window opens, no login procedure, no password, nothing.
>
> Then you get to work, and carry out your devious hacker plan
> for machine control.
>
> MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.
>
> If the password for Rob is working, then you won't need to
> reset the Rob password, while you are there. The very last line
> the helper used at the bottom of this, demonstrates how the
> daily driver account, has its password reset. So not only
> can you use LOCALGROUP to make Rob an Administrators group member.
> You can also reset the password there, if resetting the password
> is absolutely necessary.
>
> https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e
>
> Plan your mission, collect the set of commands needed for the
> mission, then it's back to the Safe Mode procedure, to get the
> machine ready for the attack. In Safe Mode, Windows Defender
> cannot stop you. When the Safe Mode login appears, hit the
> SHift key five times. Shazam. You're the administrator.
>
> Paul
>

I tried again but it said there was already a user by that name so I
restarted it but it came up with the menu and I pressed safe mode 4 and
this time I tapped 5 times and the CMD
prompt appeared. However it didn't like the commands.

It already had

C:\\WINDOWS\system32>

so I just added, net user TEMP qwertyl /ADD

thus

C:\\WINDOWS\system32>net user TEMP qwertyl /ADD

It said DNS server not authoritative for zone

I tried it again and then is said

https://postimg.cc/jwbR3fk2

https://postimg.cc/jCRszz7k

The user name could not be found

so I exited, and rebooted the computer.

Were getting closer but still not there and because I tried
before the computer remembers it sees the other user name.

Robert

_

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/24/2023 4:05 AM, Robert in CA wrote:

>>
>
>
>
> I tried to finish the procedure by using the Rescue media
> to access the CMD prompt. I did the first command wrong but
> the second time it also rejected it.
>
> https://postimg.cc/7C5XrVqm
>
> I also got one of the error messages again before I posted
> this.
>
> Thoughts/suggestions?
> Robert

You weren't supposed to be typing in the prompt

prompt> command goes here

The prompt is presented by the shell. For example,
when you do this much

C:
cd Windows\system32

the prompt shows you what the current working directory is.
Those two lines of input, they changed the current working directory,
and the prompt allows you to eyeball what the CWD is while you are
working. You were supposed to be working in C:\Windows\system32.

When you type the rest of the commands, like say

ren sethc.exe sethc.exe.bak

you played no part in making the prompt. Just enter the command.

Paul

On 12/24/2023 4:52 AM, Robert in CA wrote:
> Paul wrote:
>> On 12/24/2023 3:29 AM, Robert in CA wrote:
>>
>>
>>> I don't understand where I get the CMD prompt after
>>> pressing:
>>>
>>> re- restart to WBM with safe mode 4
>>>
>>> It just restarted normally but didn't give me any CMD
>>> prompt options. Up till that point it worked according to
>>> your instructions.
>>>
>>> Was I suppose to put in the Rescue media before pressing 4
>>> and then select it when it restarted? Then select the CMD
>>> prompt from macrium?
>>>
>>> Robert
>>
>> When the Safe Mode login screen appears, you press the
>> Shift key five times. A Command Prompt window will magically appear.
>>
>> Remember, this is the "hack step" :-) This is the thing Microsoft
>> didn't want to happen. You press the Shift key five times, the
>> administrator window opens, no login procedure, no password, nothing.
>>
>> Then you get to work, and carry out your devious hacker plan
>> for machine control.
>>
>>      MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.
>>
>> If the password for Rob is working, then you won't need to
>> reset the Rob password, while you are there. The very last line
>> the helper used at the bottom of this, demonstrates how the
>> daily driver account, has its password reset. So not only
>> can you use LOCALGROUP to make Rob an Administrators group member.
>> You can also reset the password there, if resetting the password
>> is absolutely necessary.
>>
>> https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e
>>
>> Plan your mission, collect the set of commands needed for the
>> mission, then it's back to the Safe Mode procedure, to get the
>> machine ready for the attack. In Safe Mode, Windows Defender
>> cannot stop you. When the Safe Mode login appears, hit the
>> SHift key five times. Shazam. You're the administrator.
>>
>>     Paul
>>
>
> I tried again but it said there was already a user by that name so I restarted it  but it came up with the menu and I pressed safe mode 4 and this time I tapped 5 times and the CMD
> prompt appeared. However it didn't like the commands.
>
> It already had
>
> C:\\WINDOWS\system32>
>
> so I just added, net user TEMP qwertyl /ADD
>
> thus
>
> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>
> It said DNS server not authoritative for zone
>
> I tried it again and then is said
>
> https://postimg.cc/jwbR3fk2
>
> https://postimg.cc/jCRszz7k
>
> The user name could not be found
>
> so I exited, and rebooted the computer.
>
> Were getting closer but still not there and because I tried
> before the computer remembers it sees the other user name.
>
> Robert

There is a space between the password and the next command

net user TEMP qwerty1 /ADD

^
|
+--- Space goes there. I used three spaces for emphasis.

Paul

Paul wrote:
> On 12/24/2023 4:52 AM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/24/2023 3:29 AM, Robert in CA wrote:
>>>
>>>
>>>> I don't understand where I get the CMD prompt after
>>>> pressing:
>>>>
>>>> re- restart to WBM with safe mode 4
>>>>
>>>> It just restarted normally but didn't give me any CMD
>>>> prompt options. Up till that point it worked according to
>>>> your instructions.
>>>>
>>>> Was I suppose to put in the Rescue media before pressing 4
>>>> and then select it when it restarted? Then select the CMD
>>>> prompt from macrium?
>>>>
>>>> Robert
>>>
>>> When the Safe Mode login screen appears, you press the
>>> Shift key five times. A Command Prompt window will magically appear.
>>>
>>> Remember, this is the "hack step" :-) This is the thing Microsoft
>>> didn't want to happen. You press the Shift key five times, the
>>> administrator window opens, no login procedure, no password, nothing.
>>>
>>> Then you get to work, and carry out your devious hacker plan
>>> for machine control.
>>>
>>>      MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.
>>>
>>> If the password for Rob is working, then you won't need to
>>> reset the Rob password, while you are there. The very last line
>>> the helper used at the bottom of this, demonstrates how the
>>> daily driver account, has its password reset. So not only
>>> can you use LOCALGROUP to make Rob an Administrators group member.
>>> You can also reset the password there, if resetting the password
>>> is absolutely necessary.
>>>
>>> https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e
>>>
>>> Plan your mission, collect the set of commands needed for the
>>> mission, then it's back to the Safe Mode procedure, to get the
>>> machine ready for the attack. In Safe Mode, Windows Defender
>>> cannot stop you. When the Safe Mode login appears, hit the
>>> SHift key five times. Shazam. You're the administrator.
>>>
>>>     Paul
>>>
>>
>> I tried again but it said there was already a user by that name so I restarted it  but it came up with the menu and I pressed safe mode 4 and this time I tapped 5 times and the CMD
>> prompt appeared. However it didn't like the commands.
>>
>> It already had
>>
>> C:\\WINDOWS\system32>
>>
>> so I just added, net user TEMP qwertyl /ADD
>>
>> thus
>>
>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>>
>> It said DNS server not authoritative for zone
>>
>> I tried it again and then is said
>>
>> https://postimg.cc/jwbR3fk2
>>
>> https://postimg.cc/jCRszz7k
>>
>> The user name could not be found
>>
>> so I exited, and rebooted the computer.
>>
>> Were getting closer but still not there and because I tried
>> before the computer remembers it sees the other user name.
>>
>> Robert
>
> There is a space between the password and the next command
>
> net user TEMP qwerty1 /ADD
>
> ^
> |
> +--- Space goes there. I used three spaces for emphasis.
>
> Paul
>
>
>

I tried again but it still see's the first attempt account and says
there's a duplicate account and doesn't let me proceed with the needed
commands but when I restart it takes me to the menu to press 4 and so I
entered the commands with spacing but it says no user.

https://postimg.cc/xqXXCDLf

I need a new User name /password to work with for this to work;
like TEMP1 qwertym ? Can I do that?

Robert

_

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/24/2023 12:54 PM, Robert in CA wrote:
> Paul wrote:
>> On 12/24/2023 4:52 AM, Robert in CA wrote:
>>> Paul wrote:
>>>> On 12/24/2023 3:29 AM, Robert in CA wrote:
>>>>
>>>>
>>>>> I don't understand where I get the CMD prompt after
>>>>> pressing:
>>>>>
>>>>> re- restart to WBM with safe mode 4
>>>>>
>>>>> It just restarted normally but didn't give me any CMD
>>>>> prompt options. Up till that point it worked according to
>>>>> your instructions.
>>>>>
>>>>> Was I suppose to put in the Rescue media before pressing 4
>>>>> and then select it when it restarted? Then select the CMD
>>>>> prompt from macrium?
>>>>>
>>>>> Robert
>>>>
>>>> When the Safe Mode login screen appears, you press the
>>>> Shift key five times. A Command Prompt window will magically appear.
>>>>
>>>> Remember, this is the "hack step" :-) This is the thing Microsoft
>>>> didn't want to happen. You press the Shift key five times, the
>>>> administrator window opens, no login procedure, no password, nothing.
>>>>
>>>> Then you get to work, and carry out your devious hacker plan
>>>> for machine control.
>>>>
>>>>       MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.
>>>>
>>>> If the password for Rob is working, then you won't need to
>>>> reset the Rob password, while you are there. The very last line
>>>> the helper used at the bottom of this, demonstrates how the
>>>> daily driver account, has its password reset. So not only
>>>> can you use LOCALGROUP to make Rob an Administrators group member.
>>>> You can also reset the password there, if resetting the password
>>>> is absolutely necessary.
>>>>
>>>> https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e
>>>>
>>>> Plan your mission, collect the set of commands needed for the
>>>> mission, then it's back to the Safe Mode procedure, to get the
>>>> machine ready for the attack. In Safe Mode, Windows Defender
>>>> cannot stop you. When the Safe Mode login appears, hit the
>>>> SHift key five times. Shazam. You're the administrator.
>>>>
>>>>      Paul
>>>>
>>>
>>> I tried again but it said there was already a user by that name so I restarted it  but it came up with the menu and I pressed safe mode 4 and this time I tapped 5 times and the CMD
>>> prompt appeared. However it didn't like the commands.
>>>
>>> It already had
>>>
>>> C:\\WINDOWS\system32>
>>>
>>> so I just added, net user TEMP qwertyl /ADD
>>>
>>> thus
>>>
>>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>>>
>>> It said DNS server not authoritative for zone
>>>
>>> I tried it again and then is said
>>>
>>> https://postimg.cc/jwbR3fk2
>>>
>>> https://postimg.cc/jCRszz7k
>>>
>>> The user name could not be found
>>>
>>> so I exited, and rebooted the computer.
>>>
>>> Were getting closer but still not there and because I tried
>>> before the computer remembers it sees the other user name.
>>>
>>> Robert
>>
>> There is a space between the password and the next command
>>
>>     net user TEMP qwerty1   /ADD
>>
>>                           ^
>>                           |
>>                           +--- Space goes there. I used three spaces for emphasis.
>>
>>     Paul
>>
>>
>>
>
>
>
> I tried again but it still see's the first attempt account and says there's a duplicate account and doesn't let me proceed with the needed commands but when I restart it takes me to the menu to press 4 and so I entered the commands with spacing but it says no user.
>
> https://postimg.cc/xqXXCDLf
>
> I need a new User name /password to work with for this to work;
> like TEMP1 qwertym ? Can I do that?
>
> Robert
>

There is a space character between the password "querty1" and the /ADD command.

Paul

Paul wrote:
> On 12/24/2023 12:54 PM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/24/2023 4:52 AM, Robert in CA wrote:
>>>> Paul wrote:
>>>>> On 12/24/2023 3:29 AM, Robert in CA wrote:
>>>>>
>>>>>
>>>>>> I don't understand where I get the CMD prompt after
>>>>>> pressing:
>>>>>>
>>>>>> re- restart to WBM with safe mode 4
>>>>>>
>>>>>> It just restarted normally but didn't give me any CMD
>>>>>> prompt options. Up till that point it worked according to
>>>>>> your instructions.
>>>>>>
>>>>>> Was I suppose to put in the Rescue media before pressing 4
>>>>>> and then select it when it restarted? Then select the CMD
>>>>>> prompt from macrium?
>>>>>>
>>>>>> Robert
>>>>>
>>>>> When the Safe Mode login screen appears, you press the
>>>>> Shift key five times. A Command Prompt window will magically appear.
>>>>>
>>>>> Remember, this is the "hack step" :-) This is the thing Microsoft
>>>>> didn't want to happen. You press the Shift key five times, the
>>>>> administrator window opens, no login procedure, no password, nothing.
>>>>>
>>>>> Then you get to work, and carry out your devious hacker plan
>>>>> for machine control.
>>>>>
>>>>>       MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.
>>>>>
>>>>> If the password for Rob is working, then you won't need to
>>>>> reset the Rob password, while you are there. The very last line
>>>>> the helper used at the bottom of this, demonstrates how the
>>>>> daily driver account, has its password reset. So not only
>>>>> can you use LOCALGROUP to make Rob an Administrators group member.
>>>>> You can also reset the password there, if resetting the password
>>>>> is absolutely necessary.
>>>>>
>>>>> https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e
>>>>>
>>>>> Plan your mission, collect the set of commands needed for the
>>>>> mission, then it's back to the Safe Mode procedure, to get the
>>>>> machine ready for the attack. In Safe Mode, Windows Defender
>>>>> cannot stop you. When the Safe Mode login appears, hit the
>>>>> SHift key five times. Shazam. You're the administrator.
>>>>>
>>>>>      Paul
>>>>>
>>>>
>>>> I tried again but it said there was already a user by that name so I restarted it  but it came up with the menu and I pressed safe mode 4 and this time I tapped 5 times and the CMD
>>>> prompt appeared. However it didn't like the commands.
>>>>
>>>> It already had
>>>>
>>>> C:\\WINDOWS\system32>
>>>>
>>>> so I just added, net user TEMP qwertyl /ADD
>>>>
>>>> thus
>>>>
>>>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>>>>
>>>> It said DNS server not authoritative for zone
>>>>
>>>> I tried it again and then is said
>>>>
>>>> https://postimg.cc/jwbR3fk2
>>>>
>>>> https://postimg.cc/jCRszz7k
>>>>
>>>> The user name could not be found
>>>>
>>>> so I exited, and rebooted the computer.
>>>>
>>>> Were getting closer but still not there and because I tried
>>>> before the computer remembers it sees the other user name.
>>>>
>>>> Robert
>>>
>>> There is a space between the password and the next command
>>>
>>>     net user TEMP qwerty1   /ADD
>>>
>>>                           ^
>>>                           |
>>>                           +--- Space goes there. I used three spaces for emphasis.
>>>
>>>     Paul
>>>
>>>
>>>
>>
>>
>>
>> I tried again but it still see's the first attempt account and says there's a duplicate account and doesn't let me proceed with the needed commands but when I restart it takes me to the menu to press 4 and so I entered the commands with spacing but it says no user.
>>
>> https://postimg.cc/xqXXCDLf
>>
>> I need a new User name /password to work with for this to work;
>> like TEMP1 qwertym ? Can I do that?
>>
>> Robert
>>
>
> There is a space character between the password "querty1" and the /ADD command.
>
> Paul
>

I tried again,... I don't know if it worked or not
but it took the commands.

https://postimg.cc/VdtvVwzH

How do I verify it?

What now?

Robert

_

--
This email has been checked for viruses by Avast antivirus software.
www.avast.com

On 12/24/2023 10:17 PM, Robert in CA wrote:
> Paul wrote:
>> On 12/24/2023 12:54 PM, Robert in CA wrote:
>>> Paul wrote:
>>>> On 12/24/2023 4:52 AM, Robert in CA wrote:
>>>>> Paul wrote:
>>>>>> On 12/24/2023 3:29 AM, Robert in CA wrote:
>>>>>>
>>>>>>
>>>>>>> I don't understand where I get the CMD prompt after
>>>>>>> pressing:
>>>>>>>
>>>>>>> re- restart to WBM with safe mode 4
>>>>>>>
>>>>>>> It just restarted normally but didn't give me any CMD
>>>>>>> prompt options. Up till that point it worked according to
>>>>>>> your instructions.
>>>>>>>
>>>>>>> Was I suppose to put in the Rescue media before pressing 4
>>>>>>> and then select it when it restarted? Then select the CMD
>>>>>>> prompt from macrium?
>>>>>>>
>>>>>>> Robert
>>>>>>
>>>>>> When the Safe Mode login screen appears, you press the
>>>>>> Shift key five times. A Command Prompt window will magically appear.
>>>>>>
>>>>>> Remember, this is the "hack step" :-) This is the thing Microsoft
>>>>>> didn't want to happen. You press the Shift key five times, the
>>>>>> administrator window opens, no login procedure, no password, nothing.
>>>>>>
>>>>>> Then you get to work, and carry out your devious hacker plan
>>>>>> for machine control.
>>>>>>
>>>>>>        MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.
>>>>>>
>>>>>> If the password for Rob is working, then you won't need to
>>>>>> reset the Rob password, while you are there. The very last line
>>>>>> the helper used at the bottom of this, demonstrates how the
>>>>>> daily driver account, has its password reset. So not only
>>>>>> can you use LOCALGROUP to make Rob an Administrators group member.
>>>>>> You can also reset the password there, if resetting the password
>>>>>> is absolutely necessary.
>>>>>>
>>>>>> https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e
>>>>>>
>>>>>> Plan your mission, collect the set of commands needed for the
>>>>>> mission, then it's back to the Safe Mode procedure, to get the
>>>>>> machine ready for the attack. In Safe Mode, Windows Defender
>>>>>> cannot stop you. When the Safe Mode login appears, hit the
>>>>>> SHift key five times. Shazam. You're the administrator.
>>>>>>
>>>>>>       Paul
>>>>>>
>>>>>
>>>>> I tried again but it said there was already a user by that name so I restarted it  but it came up with the menu and I pressed safe mode 4 and this time I tapped 5 times and the CMD
>>>>> prompt appeared. However it didn't like the commands.
>>>>>
>>>>> It already had
>>>>>
>>>>> C:\\WINDOWS\system32>
>>>>>
>>>>> so I just added, net user TEMP qwertyl /ADD
>>>>>
>>>>> thus
>>>>>
>>>>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>>>>>
>>>>> It said DNS server not authoritative for zone
>>>>>
>>>>> I tried it again and then is said
>>>>>
>>>>> https://postimg.cc/jwbR3fk2
>>>>>
>>>>> https://postimg.cc/jCRszz7k
>>>>>
>>>>> The user name could not be found
>>>>>
>>>>> so I exited, and rebooted the computer.
>>>>>
>>>>> Were getting closer but still not there and because I tried
>>>>> before the computer remembers it sees the other user name.
>>>>>
>>>>> Robert
>>>>
>>>> There is a space between the password and the next command
>>>>
>>>>      net user TEMP qwerty1   /ADD
>>>>
>>>>                            ^
>>>>                            |
>>>>                            +--- Space goes there. I used three spaces for emphasis.
>>>>
>>>>      Paul
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>> I tried again but it still see's the first attempt account and says there's a duplicate account and doesn't let me proceed with the needed commands but when I restart it takes me to the menu to press 4 and so I entered the commands with spacing but it says no user.
>>>
>>> https://postimg.cc/xqXXCDLf
>>>
>>> I need a new User name /password to work with for this to work;
>>> like TEMP1 qwertym ? Can I do that?
>>>
>>> Robert
>>>
>>
>> There is a space character between the password "querty1" and the /ADD command.
>>
>>     Paul

>
> I tried again,... I don't know if it worked or not
> but it took the commands.
>
> https://postimg.cc/VdtvVwzH
>
>
> How do I verify it?
>
> What now?
>
> Robert

This is where we are now:

net user TEMP qwerty1 /ADD # You have successfully created account TEMP, with a password
# You should not need to enter this command again, as now
# TEMP is a login item (on next reboot, it will be listed.

net LOCAL GROUP Administrators TEMP /ADD # The space between LOCAL and GROUP should be removed.
# LOCALGROUP is a reference to the setting of membership
# in a non-domain group.

Once you issue this last command to make the account belong to administrators, you should be done.
This is the only account preventing us from "owning" our own computer :-)
This command, you do it in the administrators "hacker window".

net LOCALGROUP Administrators TEMP /ADD

Then the TEMP account is ready to be used for a login.

If, after using the administrators window, you login to any
of the accounts on the left for which you have a password,
you should be able to review your handiwork. For example,
once the LOCALGROUP command has been entered, you can do this.

net user TEMP # review account exists, and belongs to Administrators

Even as Lowboy (my unelevated test account), I am able
to list the details of the accounts. I have removed extraneous lines
so only the relevant parts are listed.

*******
PS C:\Users\Lowboy> net user lowboy
User name Lowboy

Local Group Memberships *Users <=== Lowboy account, can check the accounts. No Administrators here.
Global Group memberships *None
The command completed successfully.

PS C:\Users\Lowboy> net user bullwinkle
User name bullwinkle

Local Group Memberships *Administrators <=== Bullwinkle is how I control the machine
Global Group memberships *None This will be the TEMP account, when you are done.
The command completed successfully. net user TEMP will dump the details.
*******

Paul

Paul wrote:
> On 12/24/2023 10:17 PM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/24/2023 12:54 PM, Robert in CA wrote:
>>>> Paul wrote:
>>>>> On 12/24/2023 4:52 AM, Robert in CA wrote:
>>>>>> Paul wrote:
>>>>>>> On 12/24/2023 3:29 AM, Robert in CA wrote:
>>>>>>>
>>>>>>>
>>>>>>>> I don't understand where I get the CMD prompt after
>>>>>>>> pressing:
>>>>>>>>
>>>>>>>> re- restart to WBM with safe mode 4
>>>>>>>>
>>>>>>>> It just restarted normally but didn't give me any CMD
>>>>>>>> prompt options. Up till that point it worked according to
>>>>>>>> your instructions.
>>>>>>>>
>>>>>>>> Was I suppose to put in the Rescue media before pressing 4
>>>>>>>> and then select it when it restarted? Then select the CMD
>>>>>>>> prompt from macrium?
>>>>>>>>
>>>>>>>> Robert
>>>>>>>
>>>>>>> When the Safe Mode login screen appears, you press the
>>>>>>> Shift key five times. A Command Prompt window will magically appear.
>>>>>>>
>>>>>>> Remember, this is the "hack step" :-) This is the thing Microsoft
>>>>>>> didn't want to happen. You press the Shift key five times, the
>>>>>>> administrator window opens, no login procedure, no password, nothing.
>>>>>>>
>>>>>>> Then you get to work, and carry out your devious hacker plan
>>>>>>> for machine control.
>>>>>>>
>>>>>>>        MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.
>>>>>>>
>>>>>>> If the password for Rob is working, then you won't need to
>>>>>>> reset the Rob password, while you are there. The very last line
>>>>>>> the helper used at the bottom of this, demonstrates how the
>>>>>>> daily driver account, has its password reset. So not only
>>>>>>> can you use LOCALGROUP to make Rob an Administrators group member.
>>>>>>> You can also reset the password there, if resetting the password
>>>>>>> is absolutely necessary.
>>>>>>>
>>>>>>> https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e
>>>>>>>
>>>>>>> Plan your mission, collect the set of commands needed for the
>>>>>>> mission, then it's back to the Safe Mode procedure, to get the
>>>>>>> machine ready for the attack. In Safe Mode, Windows Defender
>>>>>>> cannot stop you. When the Safe Mode login appears, hit the
>>>>>>> SHift key five times. Shazam. You're the administrator.
>>>>>>>
>>>>>>>       Paul
>>>>>>>
>>>>>>
>>>>>> I tried again but it said there was already a user by that name so I restarted it  but it came up with the menu and I pressed safe mode 4 and this time I tapped 5 times and the CMD
>>>>>> prompt appeared. However it didn't like the commands.
>>>>>>
>>>>>> It already had
>>>>>>
>>>>>> C:\\WINDOWS\system32>
>>>>>>
>>>>>> so I just added, net user TEMP qwertyl /ADD
>>>>>>
>>>>>> thus
>>>>>>
>>>>>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>>>>>>
>>>>>> It said DNS server not authoritative for zone
>>>>>>
>>>>>> I tried it again and then is said
>>>>>>
>>>>>> https://postimg.cc/jwbR3fk2
>>>>>>
>>>>>> https://postimg.cc/jCRszz7k
>>>>>>
>>>>>> The user name could not be found
>>>>>>
>>>>>> so I exited, and rebooted the computer.
>>>>>>
>>>>>> Were getting closer but still not there and because I tried
>>>>>> before the computer remembers it sees the other user name.
>>>>>>
>>>>>> Robert
>>>>>
>>>>> There is a space between the password and the next command
>>>>>
>>>>>      net user TEMP qwerty1   /ADD
>>>>>
>>>>>                            ^
>>>>>                            |
>>>>>                            +--- Space goes there. I used three spaces for emphasis.
>>>>>
>>>>>      Paul
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>> I tried again but it still see's the first attempt account and says there's a duplicate account and doesn't let me proceed with the needed commands but when I restart it takes me to the menu to press 4 and so I entered the commands with spacing but it says no user.
>>>>
>>>> https://postimg.cc/xqXXCDLf
>>>>
>>>> I need a new User name /password to work with for this to work;
>>>> like TEMP1 qwertym ? Can I do that?
>>>>
>>>> Robert
>>>>
>>>
>>> There is a space character between the password "querty1" and the /ADD command.
>>>
>>>     Paul
>
>>
>> I tried again,... I don't know if it worked or not
>> but it took the commands.
>>
>> https://postimg.cc/VdtvVwzH
>>
>>
>> How do I verify it?
>>
>> What now?
>>
>> Robert
>
> This is where we are now:
>
> net user TEMP qwerty1 /ADD # You have successfully created account TEMP, with a password
> # You should not need to enter this command again, as now
> # TEMP is a login item (on next reboot, it will be listed.
>
> net LOCAL GROUP Administrators TEMP /ADD # The space between LOCAL and GROUP should be removed.
> # LOCALGROUP is a reference to the setting of membership
> # in a non-domain group.
>
> Once you issue this last command to make the account belong to administrators, you should be done.
> This is the only account preventing us from "owning" our own computer :-)
> This command, you do it in the administrators "hacker window".
>
> net LOCALGROUP Administrators TEMP /ADD
>
> Then the TEMP account is ready to be used for a login.
>
> If, after using the administrators window, you login to any
> of the accounts on the left for which you have a password,
> you should be able to review your handiwork. For example,
> once the LOCALGROUP command has been entered, you can do this.
>
> net user TEMP # review account exists, and belongs to Administrators
>
> Even as Lowboy (my unelevated test account), I am able
> to list the details of the accounts. I have removed extraneous lines
> so only the relevant parts are listed.
>
> *******
> PS C:\Users\Lowboy> net user lowboy
> User name Lowboy
>
> Local Group Memberships *Users <=== Lowboy account, can check the accounts. No Administrators here.
> Global Group memberships *None
> The command completed successfully.
>
> PS C:\Users\Lowboy> net user bullwinkle
> User name bullwinkle
>
> Local Group Memberships *Administrators <=== Bullwinkle is how I control the machine
> Global Group memberships *None This will be the TEMP account, when you are done.
> The command completed successfully. net user TEMP will dump the details.
> *******
>
> Paul
>

Success ! I went into disk management and
took a pic for you then shutdown the 780.

https://postimg.cc/JsZMWw46

https://postimg.cc/k23PsjFx

Paul wrote:
> On 12/24/2023 10:17 PM, Robert in CA wrote:
>> Paul wrote:
>>> On 12/24/2023 12:54 PM, Robert in CA wrote:
>>>> Paul wrote:
>>>>> On 12/24/2023 4:52 AM, Robert in CA wrote:
>>>>>> Paul wrote:
>>>>>>> On 12/24/2023 3:29 AM, Robert in CA wrote:
>>>>>>>
>>>>>>>
>>>>>>>> I don't understand where I get the CMD prompt after
>>>>>>>> pressing:
>>>>>>>>
>>>>>>>> re- restart to WBM with safe mode 4
>>>>>>>>
>>>>>>>> It just restarted normally but didn't give me any CMD
>>>>>>>> prompt options. Up till that point it worked according to
>>>>>>>> your instructions.
>>>>>>>>
>>>>>>>> Was I suppose to put in the Rescue media before pressing 4
>>>>>>>> and then select it when it restarted? Then select the CMD
>>>>>>>> prompt from macrium?
>>>>>>>>
>>>>>>>> Robert
>>>>>>>
>>>>>>> When the Safe Mode login screen appears, you press the
>>>>>>> Shift key five times. A Command Prompt window will magically appear.
>>>>>>>
>>>>>>> Remember, this is the "hack step" :-) This is the thing Microsoft
>>>>>>> didn't want to happen. You press the Shift key five times, the
>>>>>>> administrator window opens, no login procedure, no password, nothing.
>>>>>>>
>>>>>>> Then you get to work, and carry out your devious hacker plan
>>>>>>> for machine control.
>>>>>>>
>>>>>>>        MAKE ONE COMPLETELY WORKING ACCOUNT, PLEASE.
>>>>>>>
>>>>>>> If the password for Rob is working, then you won't need to
>>>>>>> reset the Rob password, while you are there. The very last line
>>>>>>> the helper used at the bottom of this, demonstrates how the
>>>>>>> daily driver account, has its password reset. So not only
>>>>>>> can you use LOCALGROUP to make Rob an Administrators group member.
>>>>>>> You can also reset the password there, if resetting the password
>>>>>>> is absolutely necessary.
>>>>>>>
>>>>>>> https://answers.microsoft.com/en-us/windows/forum/all/cant-reset-forgotten-password-using-net-user/a8b44a62-3903-4023-9bf8-62b2eb237d2e
>>>>>>>
>>>>>>> Plan your mission, collect the set of commands needed for the
>>>>>>> mission, then it's back to the Safe Mode procedure, to get the
>>>>>>> machine ready for the attack. In Safe Mode, Windows Defender
>>>>>>> cannot stop you. When the Safe Mode login appears, hit the
>>>>>>> SHift key five times. Shazam. You're the administrator.
>>>>>>>
>>>>>>>       Paul
>>>>>>>
>>>>>>
>>>>>> I tried again but it said there was already a user by that name so I restarted it  but it came up with the menu and I pressed safe mode 4 and this time I tapped 5 times and the CMD
>>>>>> prompt appeared. However it didn't like the commands.
>>>>>>
>>>>>> It already had
>>>>>>
>>>>>> C:\\WINDOWS\system32>
>>>>>>
>>>>>> so I just added, net user TEMP qwertyl /ADD
>>>>>>
>>>>>> thus
>>>>>>
>>>>>> C:\\WINDOWS\system32>net user TEMP qwertyl /ADD
>>>>>>
>>>>>> It said DNS server not authoritative for zone
>>>>>>
>>>>>> I tried it again and then is said
>>>>>>
>>>>>> https://postimg.cc/jwbR3fk2
>>>>>>
>>>>>> https://postimg.cc/jCRszz7k
>>>>>>
>>>>>> The user name could not be found
>>>>>>
>>>>>> so I exited, and rebooted the computer.
>>>>>>
>>>>>> Were getting closer but still not there and because I tried
>>>>>> before the computer remembers it sees the other user name.
>>>>>>
>>>>>> Robert
>>>>>
>>>>> There is a space between the password and the next command
>>>>>
>>>>>      net user TEMP qwerty1   /ADD
>>>>>
>>>>>                            ^
>>>>>                            |
>>>>>                            +--- Space goes there. I used three spaces for emphasis.
>>>>>
>>>>>      Paul
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>> I tried again but it still see's the first attempt account and says there's a duplicate account and doesn't let me proceed with the needed commands but when I restart it takes me to the menu to press 4 and so I entered the commands with spacing but it says no user.
>>>>
>>>> https://postimg.cc/xqXXCDLf
>>>>
>>>> I need a new User name /password to work with for this to work;
>>>> like TEMP1 qwertym ? Can I do that?
>>>>
>>>> Robert
>>>>
>>>
>>> There is a space character between the password "querty1" and the /ADD command.
>>>
>>>     Paul
>
>>
>> I tried again,... I don't know if it worked or not
>> but it took the commands.
>>
>> https://postimg.cc/VdtvVwzH
>>
>>
>> How do I verify it?
>>
>> What now?
>>
>> Robert
>
> This is where we are now:
>
> net user TEMP qwerty1 /ADD # You have successfully created account TEMP, with a password
> # You should not need to enter this command again, as now
> # TEMP is a login item (on next reboot, it will be listed.
>
> net LOCAL GROUP Administrators TEMP /ADD # The space between LOCAL and GROUP should be removed.
> # LOCALGROUP is a reference to the setting of membership
> # in a non-domain group.
>
> Once you issue this last command to make the account belong to administrators, you should be done.
> This is the only account preventing us from "owning" our own computer :-)
> This command, you do it in the administrators "hacker window".
>
> net LOCALGROUP Administrators TEMP /ADD
>
> Then the TEMP account is ready to be used for a login.
>
> If, after using the administrators window, you login to any
> of the accounts on the left for which you have a password,
> you should be able to review your handiwork. For example,
> once the LOCALGROUP command has been entered, you can do this.
>
> net user TEMP # review account exists, and belongs to Administrators
>
> Even as Lowboy (my unelevated test account), I am able
> to list the details of the accounts. I have removed extraneous lines
> so only the relevant parts are listed.
>
> *******
> PS C:\Users\Lowboy> net user lowboy
> User name Lowboy
>
> Local Group Memberships *Users <=== Lowboy account, can check the accounts. No Administrators here.
> Global Group memberships *None
> The command completed successfully.
>
> PS C:\Users\Lowboy> net user bullwinkle
> User name bullwinkle
>
> Local Group Memberships *Administrators <=== Bullwinkle is how I control the machine
> Global Group memberships *None This will be the TEMP account, when you are done.
> The command completed successfully. net user TEMP will dump the details.
> *******
>
> Paul
>

I removed the hack,..

https://postimg.cc/Y4zs3KQT

then I went back and deleted the other account with the pin numbers. but
I got a screen I couldn't get around and so I said no to most of it. I wish
they wouldn't do things like that. Then got a pop-up for my ergonomic
keyboard and didn't know what to do with that either so I closed it.

On 12/25/2023 2:06 AM, Robert in CA wrote:

>
> Success !  I went into disk management and
> took a pic for you then shutdown the 780.
>
> https://postimg.cc/JsZMWw46 # Successful LOCALGROUP command on account TEMP
>
> https://postimg.cc/k23PsjFx
>
> https://postimg.cc/94c55rk0 # In Safe Mode
>
> https://postimg.cc/c62p1DzV # First partition SR/Active,589MB,0x27 Second Parititon C: 1862.45GB, 2TB drive, MSDOS part
>
> Next we go into accounts and  delete the other
> account with the pin numbers correct?
>
> After that I need to bring over my A?V suite
> and we'll do the mediacreationtool as soon as
> I get the DVD's. bookmarks,. my Documents
> etc.
>
> Robert

So that means, you can now do maintenance, if you log in as TEMP.

You should be able to do

net user TEMP # Review details of TEMP account, verify administrators is present

If the TEMP account is looking good, you can turn the hack off
from the Macrium LiveCD Command Prompt window. Using the diagram
I posted with the instructions for the hack.

If you want to make Rob an Administrator now, you can do it.
In an Administrator Powershell, you can switch to cmd.exe like this, and do it.
Switching to cmd.exe , is necessary some times when you cannot trust the
Powershell environment with the execution of one of these commands.

cmd.exe
net LOCALGROUP Administrators Rob /ADD

You can then do

net user Rob

and verify Rob is now an administrator.

And if Robs password is not working, you should be able to fix that too.
As TEMP, you should be able to override Robs local password, but not PIN or cloud MSA password.

net user Rob NewPasswordGoesHere # Pick a better password than that...

*******

+-----+------------------------------+------------------------------------+
| MBR | System Reserved 589MB Active | C: <Boot> 1862.45GB 1806 free | MSDOS partitioned, suited to Optiplex 780
+-----+------------------------------+------------------------------------+

Your C: drive could use a label. In File Explorer, do Properties on it.
The label allows you to assign a short text string like "OrigW10"
or "Refurb10", so at a later date, you will remember which OS that is.

There might be one backup sitting in the C: partition somewhere.

You can shrink C: from the Disk Management pane. Right click C: and
there should be a "Shrink Volume" option. You can, for example,
easily accept the defaults,

"Enter the amount of space to shrink" <=== the amount will only be half of 1862, or about 931 or so.
the field might read 931*1024= 953344 Megabytes

There is some metadata, which is half way out on the C: partition,
and the Microsoft software refuses to move it. Many third party
partition managers will agree to move it.

There are a couple ways you can achieve a more precise shrink (to about 76GB).

1) Paragon Partition Manager Free Edition (64-bit)

https://download.cnet.com/paragon-partition-manager-free-edition-64-bit/3000-2248_4-10904411.html

2) If you do a backup of that C: partition to an external disk, then do
a restore on top of C:, one of the options is to "resize the partition".
You can use the resize control during the restore procedure, to achieve a
76GB partition, with all the original files in place.

*******

I don't want to overwhelm you with work.
I'm just celebrating we might be in control.
There's no big rush to do things, and they can be done one at a time.

But at least now, if you need to do something as Administrator,
you have a few more options.

Paul