Windows 10: Microsoft user account logs locally but online requires a password reset

I have been assisting an elderly gentleman who has a PC with a user account tied to his Microsoft account. He was scammed over two weeks ago, the attacker had remote access to the PC and since then his PC user account has been requiring that he verify his account. When he logs onto this account online, it refuses to recognize his password. The one time he was able to chat with support which we could not recreate the steps to get back to; he even has a case number it was reported to him that the password had not been changed in 2 years. So, even before reaching support that one time, he tried

:)

 

How to reset Windwos 8 Password?

Change or reset your Windows password

• If you've forgotten your Windows password, there are several ways to retrieve or reset it:
  • If your PC is on a domain, your system administrator must reset your password.
  • If you're using a Microsoft account, you can reset your password online. ...
  • If you're using a local account, use your password hint as a reminder.

 

Reset Password of User Account in Windows 10  

But why not give the user the option to disable Option Five? Why force it on users? Some people (like myself) don't want there to be an easy (and arguably not secure) way to do a password reset.

 

Reset Password of User Account in Windows 10


Without the questions, there would be no way to verify if it's you when resetting the password on the sign-in screen, so they just made it a requirement.

It's basically the local account's version of the Microsoft account's two-step verification.

However, if you don't use a password for the local account, you won't have any questions.