<!--Not Liable for Damages To System or Any Misuse Of Info-->
<!--Please read the comments in the "Source Of Info" May not work and can mess up your system->

Exploitation of Windows Startup Repair and Sticky Keys:

Boot windows when you see "Starting Windows" Turn off system.

Turn on system than boot into windows this should pop up:

Click "Launch Startup Repair (recommended)
Let it do it's stuff. When you get this screen push "Cancel" (MUST DO THIS DO NOT CLICK "Restore")

After pushing cancel it should pop up this Screen:

Click on "Show problem details" then scroll down to the bottom and click the link on the very bottom. Notepad should open up. In notepad click File/Open then double click your Local Disk (The below picture is D: because of virtual box but your's should be C: if not using virtual box.)

Once in your "Local Disk" click "Windows" then "System32" DO EVERYTHING I DO FROM THIS POINT! IF NOT YOU MAY BREAK YOUR COMPUTER! Scroll down and find "cmd," then make a copy of it in the same folder (Ctrl-C, Ctrl-V). You should get a file named "cmd - Copy" or something like that. :

Then find "sethc" in the same folder. This file runs Sticky Keys (That thing when you click shift to many times.) Rename it to "sethc 1":

Then rename your copy of cmd ("cmd - Copy") to "sethc"

Now exit Notepad and turn off your computer either by clicking "Finish" or Restart it manually. Now it should boot up to the login screen:

Click shift 5 times to open up cmd (As seen as above)
Next, we need to find out your local administrator is. To do this type in (To the cmd) "net localgroup Administrators" This will show all the admins on your PC look for an administrator account that does not have your school/work domain in front of it followed by "./" As you can see, one of the admins is named "qwaszx." This is common for schools to use random strings to ward off evil spirits (Kids).

Now we need to change the admin password to do so type (Into cmd) "net user <ACCOUNT NAME HERE> *" Then type in your new password twice (Into cmd) Now you can log on to the admin account! But some schools/workplaces like to disable this account if so just go and do the following things:

If admin disabled type "net user <ACCOUNT NAME HERE> /active:yes" This will allow you to access the admin account.

(SOURCE OF INFO)

 

[MissingNO123]

This is nowhere near as fun as hijacking the LANSchool application and turning your computer into a Teacher machine

 

[vaporwave]

Awesome guide will be able to use to fix something in a pinch (or just unlock the school pc's

 

[Captain_N]

the start up and repair should be disabled. The admins are not going to do that tho. Will this work on computers that have no local accounts because they are using active directory. I know for a fact that at my work you cant login to a local account as its controlled by active directory domain server. no internet means no login. They have that shit pretty locked down as well as bios passwords.... the computers wont even bring up the login screen when there is no server communication. they also have recovery disabled which they dont need as all student pcs are imaged and store no personal data.
there is one possible flaw. they did not disable windows 7 power shell on student accounts. Thats is a big way in. The powershell whould be running under least privilege but still its a way in.