The login screen says the password is incorrect and the client swears they never changed it. Both rescue builds carry password tools - the real question is what those tools can and cannot touch.
Offline password reset is the most requested WinPE job in IT support, and the most misunderstood. A PE tool can clear or reset the password of a local Windows account stored on the disk. It cannot reach into Microsoft's cloud to change a Microsoft account password, whatever any menu promises. Sergei Strelec carries a whole bench of reset utilities, NHV Boot carries the standard proven ones - here is how to choose and what to check first.
On the login screen, look at what Windows asks for. A plain user name with a password hint is usually a local account - resettable from PE. An email address means a Microsoft account - its password lives online and is changed on Microsoft's website from any browser, after which the PC accepts it once it connects to the internet. PIN and fingerprint sign-in are only doors to the same account password underneath. Skipping this check is how engineers waste an hour.
Strelec is famous here: its builds carry PCUnlocker, Reset Windows Password and Windows Login Unlocker among its utilities. Three different tools sounds like showing off until the day one of them fails on an unusual Windows build or a stubborn SAM file - then you simply open the next one. For a support engineer who does lockouts weekly, that redundancy is real value.
NHV Boot includes Active Password Changer and Reset Windows Password - the same proven class of utility, in a faster-booting, friendlier package. For the standard local-account lockout, which is nine out of ten cases, NHV finishes the job exactly as well as Strelec. NHV also advertises extra unlock scenarios including Microsoft account and domain situations; treat those as assisted sign-in help rather than true offline password changes, and set the client's expectations accordingly.
If the Windows drive is BitLocker encrypted, the PE cannot even read the account database until the volume is unlocked with the recovery key. No reset tool in either build bypasses BitLocker, and any tool anywhere that claims otherwise is lying. Locked out plus BitLocker plus no key equals a Windows reinstall conversation - deliver that news early and kindly.
Boot back into Windows, sign in, and immediately set a proper new password from Settings instead of leaving the account blank. Then help the client prevent a repeat: link a Microsoft account for self-service recovery, or create a password reset disk on a USB while the machine is in your hands. The comparison video shows both toolkits' password sections on screen so you can see the menus before you ever need them in anger.
Boot speed, tools, drivers and the final verdict - the complete Strelec vs NHV Boot comparison, step by step.
▶️ Watch Full VideoNo tool can change the password stored on Microsoft's servers. Change it online from any browser, then sign in on the PC while it is connected to the internet so it syncs. PE tools reset local accounts stored on the disk itself.
Yes, indirectly. The PIN protects the account password underneath. Once the local account password is reset and you sign in with it, you can set a fresh PIN from Settings - Accounts - Sign-in options.
Domain account passwords are managed by the organisation's server and IT policy, not by the local disk. A PE reset is the wrong path there - the correct fix goes through the company's IT admin.