The ntuser file at WINDOWS\repair is from the default user, what you need is a "ntuser.backup" located in your user profile folder.. unhide files and folder from the Tools > Folder Options > View > "Show hidden files and folders" and "Hide protected system files (recommended)... you should have at least one backup of ntuser. First rename or move to another folder the old ntuser.dat (which you have already done) and next rename the ntuser.backup file to ntuser.dat, and restart the computer. The user account should be restored to the date of the ntuser.backup which means the settings you have changed since that date will be lost. This will change the account registry data so backup personal files to prevent possible loss....
Come to think of it, when I rebuilt my mother's computer, I may have used 1903. Have to find that USB and check.fixing win 10 profiles reveals one weakness in win 10, user profiles break too easy. It happened to me in the past.
I don't suppose you can get the iso for 1903 as then you could try a repair install.
you might search your computer for other copies of the file:
start cmd.exe as an admin
cd c:\
attrib.exe /s ntuser.*
mine shows the following files:
(all of the transaction logs, and ntuser.dat from different directories, I am not sure if any would be useful)
(not sure if there is a free tool to read the transaction logs. maybe forensics tools)
(it would be good to know how the files got corrupted and fix that problem)
C:\>attrib /s ntuser.*
A H I C:\Users\Cloud\NTUSER.DAT
A SH C:\Users\Cloud\ntuser.dat.LOG1
A SH C:\Users\Cloud\ntuser.dat.LOG2
A SH C:\Users\Cloud\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TM.blf
A SH C:\Users\Cloud\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000001.regtrans-ms
A SH C:\Users\Cloud\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000002.regtrans-ms
SH C:\Users\Cloud\ntuser.ini
A C:\Users\Default\NTUSER.DAT
A SH C:\Users\Default\NTUSER.DAT.LOG1
A SH C:\Users\Default\NTUSER.DAT.LOG2
A SH C:\Users\Default\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TM.blf
A SH C:\Users\Default\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000001.regtrans-ms
A SH C:\Users\Default\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000002.regtrans-ms
A C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
A SH C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1
A SH C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2
A SH C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TM.blf
A SH C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000001.regtrans-ms
A SH C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000002.regtrans-ms
A C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
A SH C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1
A SH C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2
A SH C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TM.blf
A SH C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000001.regtrans-ms
A SH C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{53b39e88-18c4-11ea-a811-000d3aa4692b}.TMContainer00000000000000000002.regtrans-ms
This might tie into fact that during install a user called defaultuser is used in the period of the install you are running off USB. NTUSER.DAT is likely created once you boot off the C drive. Once accounts are created defaultuser is deleted.Edit: I'm pretty sure the NTUSER.DAT is created during the setup, so you can't extract it from the ISO.
This might tie into fact that during install a user called defaultuser is used in the period of the install you are running off USB. NTUSER.DAT is likely created once you boot off the C drive. Once accounts are created defaultuser is deleted.
So all the accounts that auto logged out were just local accounts? not admin? not sure what it changes, maybe permissions.