Windows 10: Personal User Account Hijacked by Microsoft

Be right, wrong or indifferent, I set my PC up to not require a logon. Then one morning when I fired up the PC, all of sudden I had a Microsoft Logon screen requiring a password. I did have an old Passport account, but never really used it, obviously MS hadn't forgotten. My personal PC user account had been completely removed and the only user account was now the Passport account. I know for a fact it was done without my knowledge or concurrence. Any idea how this could occur? Research indicated I could set up a local account and then remove the MS account. However, setting up a local account seems to require the use of a email (Preferably MS, of course) account and password, which I do not want to do. Any suggestions?

:)

 

Tuyrning the STUPID password functionn off!

Microsoft didn't hijack your PC as you yourself state you setup your Microsoft account on your PC.

Simple solution, create a new local user without a password and delete the Microsoft account user.

 

After upgrading Win 10 to last version 1709 I have to sign in I do not want

Hi,

Maybe your user profile is associated with a Microsoft account?

If yes, then, this will fix it How to Revert Your Windows 10 Account to a Local One (After the Windows Store Hijacks It)

Hope this helps

 

Hello, I can't offer a solution, only that I've noted a similar thread where the user, suddenly finding he was presented with the need to enter a password, managed to recall what it might have been.

So it might seem you're not the only one.

Could you look at your Update History and see if the date of an update corresponds to when your password prompt first appeared?

 

I am not really sure, but I think it was around the time that the following updates occurred; Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB3176934) or Feature update to Windows 10, version 1607.

 

Does your current account behave as you expect- do Documents ,Videos... your personal folders contain what you expect- is your desktop as you expect- startups the same? I.e. s it still the same account?

Do you have more than one account on your PC?

 

As far as I tell so far the new account acts the same as the old. I had and have only one account that I know of. I am not sure that there are not hidden or system accounts being used. I have been reviewing the Security Event logs and it looks to me like (I am not very knowledgeable of how the security works, so this is just my interpretation) the initial logon is automatically accomplished using my old account, because I can see my old account name in the log. Then then I can see the steps in the log at what appears to me of that account being usurped by the MS account. As far as I can tell, this started on 8/21/2016 and repeats every time I log on. Unfortunately my event log only went back to 8/20/2016 and not for a full day. However, the log for the time available looks quite different in that there are a lot of ANONYMOUS LOGONs and a workstation mentioned that I have never heard of. That all being said, it doesn't explain what caused the hijack, at least to me even though the activity on 8/20/2016 looks suspicious. I looked in the other type of event logs and didn't find anything that I could correlate to the the security events on 8/20/2016 or 8/21/2016. Technically, I'm in over my head on this one. I suspect this will remain a mystery, unless you have some further insights.

Thanks again for your help.