0

Is there any way to modify a system file when the reboot/shutdown button is pressed without using an external tool like a Linux live CD?

I came across a post that suggested modifying a registry value to achieve this, but unfortunately, it didn't work for me. How can I tell Windows to overwrite a system file on the next reboot?

I am solely focused on finding a solution within the current parameters and do not wish to explore alternative methods at the moment.

Edit: I am working on a OS make bypass windows login, so once user boots in OS it find partition in which windows is installed then goes to dir where SAM file exists remove password using "chntpw" (before removing it it backup it in root of windows file system)

Here come the reason why I want to do what title says is to replace backuped SAM file with the modified one (the one which is being used by windows), so that once reboot everything goes normal.

shashankx86
  • 1
  • 4

1 Answers1

0

Modifying a system file directly during the reboot or shutdown process without using an external tool or a Linux live CD is not a straightforward task. System files are typically protected by the operating system to maintain stability and security, and modifying them while the system is running can lead to unpredictable behavior.

However, if you specifically want to overwrite a system file on the next reboot, there is a built-in Windows feature called "PendingFileRenameOperations" that can be utilized. This feature allows you to specify files to be replaced during the next system boot.

To make use of this feature, you'll need to modify the Windows Registry. Here's a step-by-step guide:

  1. Press the Windows key + R to open the Run dialog box.
  2. Type "regedit" and press Enter to open the Registry Editor. Note: Modifying the registry can have unintended consequences if not done properly, so proceed with caution and make a backup of the registry before making any changes.
  3. In the Registry Editor, navigate to the following path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
  4. Right-click on the "Session Manager" key, select New, and then click on "Multi-String Value".
  5. Rename the newly created value to "PendingFileRenameOperations" (without quotes).
  6. Double-click on the "PendingFileRenameOperations" value and add the file paths you want to replace. Each file path should be entered on a separate line, with the first line being the source file and the second line being the destination file. For example: 
    C:\Path\to\source\file.txt
C:\Path\to\destination\file.txt
    You can specify multiple file replacements by adding additional pairs of lines.
  7. Click OK to save the changes.
  8. Close the Registry Editor.

After following these steps, the specified files will be replaced during the next system reboot. Please keep in mind that modifying system files can have serious consequences, so it's important to exercise caution and have a backup of any critical files before proceeding.

Mastaxx
  • 1,379