He tried the domain admin fallback. Incorrect.
It was the knowledge that AutoAdminLogon never truly forgets. It only hides. autoadminlogon
: Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon . Configure Values : Find or create AutoAdminLogon and set its value to 1 . Set DefaultUserName to your desired account. He tried the domain admin fallback
A local shadow account. One with no password. One with no MFA. One that, three years ago, when he first set AutoAdminLogon , he had accidentally created and then forgotten. three years ago