defaultuser0 

This just in: "Enderman gets locked out of Windows 10; can't teleport back in, claiming a 'fake account!'"

Me: *logging in as Administrator* PC: 'Your account has been disabled. Please see your system administrator." Me: excuse me what the frick

The upload date says 2019, but everything in me is screaming 2009. The channel name, the text on the bottom, the non-clickbait title, even the music.

"OOBE" **has Windows XP theme flashbacks** Ah, what a name.

*defaultuser0 : exists* *Fans: Is this some sort of creepypasta?* *Enderman: Well yes, but actually no.*

Audit Mode: It's used to make a custom version of windows(for example: Installing programs, drivers and/or customization(wallpaper, custom icons...)) and then you create a custom windows image to save it to a CD, then you can install windows from there and you'll have the programs, drivers and customization. That special tool is used to prepare the system and help creating the image

Next time try naming the user defaultuser0

Hey @Enderman: The "Audit mode" is used by OEMs to prepare systems right before creating an image and bumping it out on all of their machines. You can install stuff like Drivers there. The "defaultuser0" is the user account used for actually being able to use the whole OOBE setup. Without it you cant run the OOBE setup as it MUST be run from a user context and as such a user account. As soon as you finish OOBE (the "User creation part") the account gets automatically deleted by Windows. But if you abort the setup without actually creating a user account Windows "stalls". As the "Administrator" account is actually no real account but the "defaultuser0" account (which at the same time got already deleted as quitting OOBE) Windows cant login again as the SID (Security ID) for the account is no longer valid and as such will always show a wrong password. Actually it should be called "No GUID for this account anymore" ;-)

Not really a bug. Audit mode lets you modify a Windows install and have Windows take the modifications into account as new "defaults", so that it will show the OOBE on next reboot. It's basically what OEM's use for configuring their computers. defaultuser0 is a dummy account created temporarily in order to allow Audit mode to operate, and is being watched upon by Sysprep (the popup you closed straight away), which is responsible for applying the changes to the default configuration.

How to make your windows unstable: 1. Install Windows 10 2. Reboot connected to internet

I remember when I was opening random files in my system. I clicked on some setupuser.exe stuff and there was this deafultuser0 which had a password. I removed the user later.

Fun fact: If a defaultuser0 account is made while in Audit Mode, the OOBE will actually create a "defaultuser1" account. If you've made a defaultuser1 and a defaultuser0 account in Audit Mode the OOBE will make defaultuser2. I actually manually created defaultuser0-100 in Audit Mode and found that the OOBE made defaultuser101...

Windows: happens Enderman: so you have chosen death

This just happened to me today. I installed windows on a new machine, and for some reason it freezed right before i entered my new used details in, at that moment, when I restarted, defaultuser0 appeared instead of my account and it the one who has not been created. just logged in by itself, no pass required.

What happen if you install a virus while this is open? Pd: sorry for my english

CTRL+Shift+F3 (Audit Mode) is usually good for adminstrators who need to prep a system image for use in enterprise environments avoiding the need for installation over and over on computers with the same hardware setup. (sysprep helps with getting back into the OOBE)

Similar story: I was browsing through system32 on Windows Vista (I know that was a poor move.) and I found msoobe. I almost screwed up the computer by clicking on it. I pinned it to my start menu and added a shortcut for it to my desktop just to look extra weird. I still have the file and it didn’t damage the system by moving it.

Me: Windows 7 its faster for my potato RU-vid Recomendations: Hey, update to windows 10 to lock your computer!

I love this channel. Obscure details and random bugs in operating systems are what I live for.

Everyone be complaining about the 360p, but it reminds me of old RU-vid in a good way.

FYI Audit Mode is so OEMs and IT admins can install software prior to windows setup. That’s why the sysprep dialogue launches on login as the system needs to be sysprepped after.

Bro! I remember when you were a small RU-vidr and now your channel grew so big and fast. Well done!

Cortana: Hello Ender- Enderman: YEET I'M OUTTA HERE

I LOVE how this is not clickbait or anything like that at all! Just pure content! Keep it up! 💪❤️

Audit Mode is needed for making Windows builds (Windows with soft and other stuff, packed in an install.wim or .esd file)

Nice video man, and it's really fun :D

Watching this everytime makes my smoke alarm go off

i had a fresh install of windows 10 once, on my new pc, and i also saw some user called defaultuser000 or so, probably just defaultuser0, so now thank you that you got information about it, creeping me out

I've encountered this bug many times, especially working on Lenovo and HP laptops. I've also encountered where Windows installs Windows on a separate partition when being reset to factory default

Hey Cortana Cortana: WHAT?! I’m freaking sleeping Me: I bet you can’t send me to 2001 before I was born Cortana: YOU DARE OPPOSE ME MORTAL?!

I wonder what happens if you combine it with the sethc exploit. Would it just log into System like usual or would it cause additional breakage? And if you try to create additional accounts or enable the admin account, does it work? Seems like this exploit to enter audit mode before first boot up could have potential.

Audit mode is used to create a master image for enterprise deployment. Set up, capture, pack into windows installer, and you've got a windows installer image that will start fresh but with all the apps and drivers.

bruh bring back the old font

0:57 Audit mode is intended for some PC manufacturers to preload software, custom default desktop configurations, and manufacturer info (for the "about" page). Settings of that fake Administrator account get copied over to new user accounts if I'm not mistaken.

Im guessing this temp account will have perms along the lines of system or trusted installer perms if so you could do anything to that os

I love watching your videos

"Your administrator account was disabled, *please see the administrator."*

Audit Mode is for customize Windows instalation with drivers and programs to create a image for use on other PCs via clone or custom ISO.

That glitch happened to me when I accidentally closed the lid of my laptop on the setup screen. It logged me in as defaultuser0.

The Audit Mode is for PC shops that they can install drivers and applications without using create the account

Lol a few weeks ago i imagined a video about this weird user and now you are doing it

I work at Geek Squad. The "Audit" mode is actually Admin mode. We use it to check for any accounts or left over data, and to refresh the machine for Out Of Box Experience.

According to Microsoft docs, audit mode is for PC manufacturers to make their own PC image that'll come with their computer they're selling, it's sort of like a way to prepare everything for the end user and customize things, I guess?

hello Enderman, this mode is set for Oem Configuration, For example with Lenovo and Thinkpad on Windows 10 systems, they provide Custom Windows Images available on their website in order to set Machines to factory State. During the process Windows boots on this Administrator/defaultuser0 account to do Apps and Settings Deployment.(sysrep] I totally Messed up with it the first time, never logoff during operations lol. Good videos !

Very interesting, thanks for sharing that!

And just like that, cortana rested in hell

nice tobu's music for the intro

Audit mode is used by system administrators to create custom windows images for businesses to deploy using their imaging software. This is also how OEM’s create their custom windows images for their computers that they sell. Also the administrator account it loads into is not fake. It loads into admin so it has all perms to install software and configure the system. As for the defaultuser0 i don’t know about that. Then again your not supposed to logout or switch users in audit mode.

Have made defaultuser0 on accident. My laptop had crashed due to a ram issue, and I thought resetting the pc would do it. However, it crashed when it finished, and it ended up with defaultuser0 and I can't access it. I have gotten a new pc but still nothing.

Once I was trying to enable built in administrator account after skipping oobe I didn't do it right and I was stuck with defaultuser0

So I only wanted to re install windows because I had problems with it but now it won't let me create an account keeps getting stuck at just a moment I force shutdown and tried again but it still did the same thing

For a second I thought this was gonna be a creepypasta

Cortana: Hi! Enderman: Well hello there, annoying redundant voice assistant barely anyone cares about! We meet again!

You can strip cortana out of windows using NTLite btw

Nice I got a bug fix ad before watching this

what if you boot a kali on this virtual machine in forensics mode, get the password for defaultuser0 and then log in?

What is the version of Win10 used in this video ?

audit mode is for installing chrome before using the computer

I've got the defaultuser0 folder in C:/Users after i skipped the stupid oobe and created user using net user while the oobe was running.🤔

Ok let's wait for somebody who'll make an entire creepypasta about defaultuser0

i found defaultuser0 somewhere i need to delete it?

Today I tried to help my friend because he installed Windows 10 but after installing only user is defaultuser0 and can't do anything.

In the C:\Users section on my computer, I have an account call defaultuser100000 is this normal?

I somewhat knew about this, last year when I was trying to install Windows 10 into my mom's laptop, this happened, sort of. Basically after the installation it skipped right to the login screen, and what did I find, defaultuser0, I couldn't login at all, nothing worked, so I gave up and installed Linux on it.

Yes this is how OEM’s install bloat ware on your computer. Then they package it all up into an image to a capture server and deploy it to all their products.

Wasn't the account discovered before? Because I use to have this account installed like eight months ago

Me logging in to my computer: *typing correct password* Computer: Your account has been disabled. Please see your system administrator. Me: looks in mirror.

i know this is 3 years ago but you can acuatlly go in defaultuser0 by restarting the oobe again it will stuck at just a moment and if you restart it it will log in you to default user 0 but if you sing out you will not goinh to sing in again because of it changing password you can only sign in if you change the password of defaultuser0

Thx recommended for this amazing video

hi, is there a way how to exit audit mode? because i tried this on my windows 10 vm and now i cant go back.

You should attempt to force sign in defaultuser0 in some way? I wonder if it would break windows or even ATTEMPT to load.

The recommendation just never stops....

earlier today I noticed this in the users folder after reinstalling windows XD

@Enderman This is not a bug. Audit mode is a feature of Windows 10 and is available since the beginning of its existence. It is used mostly by the enterprises to install the operating system in a separate drive and all the other applications in a separate drive.

More Proof: If you installed fully windows 10, you open CCleaner and then go to settings, go to user and you will see defaultuser0

This happened to me, where I could not login to either accounts. Thanks for helping!

Audit mode is a step in Windows Deployment. It allows manufacturers like Dell to put in Drivers, Updates, possibly bloatware, etc. Then they just click on "reseal" and there we go. The more you know... :)

you can also restart during OOBE, but there will be no admin.

whats with the 2014 edm music?

There is a bug in windows xp install, i opened up control user passwords 2 and there was an account called owner

Audit Mode is used by companies to add policies and install programs before the OS is installed.

Creepypasta Writers: Its free Real Estate

I have a folder in my computer called C:/Users/defaultuser0 ?

you can enable the defauluser0 account by running the oobe and then go to the lock screen and you will see it

there is an administrator account all of times controlled by system you can enable it in users and groups settings

defaultuser0 is best user

What happened when unistaller the processer in device manager?

Me:Logging in as Admin PC:Your account is disabled. Contact your system Administrator. Me: is my pc stupid

Nice vids,comrade!

What is the name of music in this video?

You can see defaultuser0 in The C: drive in users, you need admin perms to go in to defaultuser0 folder but you can see administrator I think I did see default user 0 in the users folder in c:drive and administrator even tho I did not make a administrator account before but my dads account has admin perms so he can look in administrator and defaultuser0 so ya try looking in C: and then users and you’ll see defaultuser0 and administrator np for helping you enderman!

Computer: Out-of-Box-Experience People: Out-of-Body-Experience

How do you make your video stretched

I fresh-installed windows 10 1909 last week on my new PC and that account is still there

so somehow, I got windows to keep the defaultuser0 profile and it appears to actually exist somehow. i kind of feel like being in a creepypasta.

im when no explorer.exe -> "no explorer.exe ? ok imma watch Enderman on YT"

enderman videos titles be like: hacked.mp4

Control Shift F3 is for OEM's to install their Hardware Drivers and Software before a User Account is Created they setup a Computer a the Desk Install the drivers Using that hotkey function then they reseal the Computer to go to the End User

me: skipping oobe defaultuser0: helo me: reinstalling virtual machine

Good that the subtitles are now longer displayed! Better to read. 👍