so ammo would that mean if he had a recent b/u of the registry, restoring it would solve the problem?
Printable View
so ammo would that mean if he had a recent b/u of the registry, restoring it would solve the problem?
well, i tried running syskey.exe and it haven't worked ('incorrect parameter' or something similar displayed), so the syskey can't be enabled that way. *but* is it possible to restore syskey settings by replacing key system files with backups? (from the 'repair' folder)?
I believe the repair folder/ERD does have a copy of the LSA secrets, but I think they are also encrypted with the syskey; so if you already lost your syskey, you probably wont be able to recover that backup... (I think); You might still want to give it a try though cause I very well could be wrong on this.
Ammo
update: replacing system, security & sam files with backups screwed up the whole workstation. it now resets itself after loading core... bluescreen disappears so fast that i can't even read the error message. failsafe mode and 'previous working config' option don't work.