Reset Administrator password on Windows 10 tablet UEFI

There are much and more manuals in net about this stuff. But noone of them help me with this problem. I can't boot from usb flash on table.
First of all, you must enable usb boot. To enter “System Restore” you need to hold Shift key and click on Reboot option.
“Diag” → “Advanced options” → “UEFI Firmware Settings”.

After reboot you'll see common menu, flipped 90 degrees.

“Security”→ “Secure Boot Menu” → “Secure Boot ” → Disabled.
“Boot” → “Quite Boot” → Disabled.

If you see in tab “Boot” in “Boot Option Priorities” the name of usb flash – hooray. It means, that it have something to boot from.
Write an iso to usb stick with dd:

$ sudo dd bs=1M if=/home/user/Downloads/win10_pirate_edition_cracked_boot_uefi_32.iso of=/dev/sdX && sync

where “if” is path to iso file, “of” is the path to unmounted usb stick, “X” is you letter.
You can see drives with:

$ lsblk

In most cases this variant would work, but not of mine. Tablet wont boot bunch of isos. And usb stick was absent on Boot menu.
I was also trying to write iso with http://www.pendrivelinux.com/ soft, but no luck.
Solutions is to write all yourself with gparted and simple commands.

$ sudo gparted

“Device” → Create Table Partition → gpt
Format – fat32 (FS for gpt+uefi)
Partition → Manage Flags → boot,esp
“Apply”

Windows was download from official website:
https://www.microsoft.com/en-au/software-download/windows10ISO
I choose Windows 10 Single Language → English → 32-bit

Mount iso in folder and copy files to usb stick, whick you previously mount.

$ sudo mkdir /media/win
$ sudo mount /home/user/Downloads/Win10_1511_2_SingleLang_English_x32.iso /media/win
$ cp -R /media/win/ /dev/sdX/
$ sudo umount /media/win
$ sudo rm -rf /media/win

Now you can enter UEFI, set the usb to first in boot priority, save and reboot. Windows CD greeting must be loaded. Wheeeew.

The usual scenario of reset password goes further.
Select “Repair”, Settings, Command line.
Find the drive with Windows, usual it's C:.
Change utilman.exe to cmd.exe and reboot

cd c:\Windows\System32\
move utilman.exe utilman.exe.bak
copy cmd.exe utilman.exe
shutdown /r /o

you can replace sethc.exe. It's the sticking buttons program. Press Shift for 5 times to show cmd.exe.
Click on icon marked on image.

After reboot open console and show all users.

net user

Find out yours and change it's password

net user <username> <password>

You can type * in password. It would be the prompt to type it. Enter to leave blank.

After that reboot, change files as it was before

cd c:\Windows\System32\
del utilman.exe
move utilman.exe.bak utilman.exe
shutdown /r /o или wpeutil reboot

reboot, change Secure Boot, Quite Boot → Save.

At last the password was successfully reset.


 

Comments

Armaco's picture
Nice tutorial! UEFI seems to only support GPT/FAT32-formatted USB stick. I used PCUnlocker Enterprise and it could boot in UEFI, and reset my lost admin password. It's worth a try.
Dinesh's picture
Bad
Belan's picture
If you have access to another Windows system, you can make the bootable Windows 10 install USB using these freewares:
rufus
iso2disc
makhalemele's picture
good

Add new comment