Ok, I loaded the drive as a external via usb to sata converter, loaded the drive as a hive and inspected the “winlogon” explore and userinit have the stated values = Explorer.exe C\WINDOWS\system32\userinit.exe, but the system still logs on after entering the pass word and immediately back off…Can someone help???
