I've searched the registry, the bat and sys files, and rummaged through hidden folders and I can't work out precisely how they have managed to crippple the local logon.
I noticed however a command embedded in a scipt that ran the following regentry
[HKEY_LOCAL_MACHINE\SOFTWARE\????? Computers Ltd]
[HKEY_LOCAL_MACHINE\SOFTWARE\????? Computers Ltd\Network]
This suggests perhaps that a profile user is set up before logon? I've blanked oout the name of the company with ??????.
In the past when their harddrives had failed I simply ghosted another drive out of a similar spec PC but on this occasion I have had to replace the motherboard so I need to logon locally to change the motherboard resource drivers.
Booting from a floppy is no use. I need to logon and run windows locally.
Anyone got any suggestions?