{"id":7910,"date":"2022-01-16T10:46:58","date_gmt":"2022-01-16T10:46:58","guid":{"rendered":"https:\/\/www.hexacorn.com\/blog\/?p=7910"},"modified":"2026-04-10T23:02:35","modified_gmt":"2026-04-10T23:02:35","slug":"ms-cxh-and-ms-cxh-full-handlers","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2022\/01\/16\/ms-cxh-and-ms-cxh-full-handlers\/","title":{"rendered":"ms-cxh and ms-cxh-full handlers"},"content":{"rendered":"\n<p><strong>Update<\/strong><\/p>\n\n\n\n<p>On Windows 25H2 ms-cxh-full:\/\/foo and ms-cxh-full:\/\/0 don&#8217;t seem to work anymore.<\/p>\n\n\n\n<p>You can still run f.ex.:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ms-cxh-full:\/\/FRX\/INCLUSIVE<\/pre>\n\n\n\n<p>This will initially show the black screen and then the OOBE wizard will kick in. <\/p>\n\n\n\n<p>When the screen is still black, you can press SHIFT-F10 and that should bring back the desktop, but once the wizard kicks in, it doesn&#8217;t work anymore. At that stage I had mixed experience with ALT-TAB still working sometimes, and switching to other applications, and sometimes just showing the preview of other tasks, but the wizard remaining on top of the screen. In such case, you can still try the WIN+R trick I described below.<\/p>\n\n\n\n<ul>\n<li>Press WIN+R  &#8212; this will open invisible Run dialog box<\/li>\n\n\n\n<li>Run &#8220;taskkill \/f \/im UserOOBEBroker.exe&#8221; &#8212; this will terminate the &#8220;UserOOBEBroker.exe&#8221; process.<\/li>\n\n\n\n<li>Run &#8220;taskkill \/f \/im wwahost.exe&#8221; &#8212; this will terminate the &#8220;wwahost.exe&#8221; process.<\/li>\n<\/ul>\n\n\n\n<p>Thx to @Radkeyboard7984 for spotting the SHIFT+F10 combo and discussions about ms-cxh-full protocol.<\/p>\n\n\n\n<p><strong>Update<\/strong><\/p>\n\n\n\n<p>I noticed that some forums reference this post and thanks to that I realized my old post had a mistake. The CXH doesn&#8217;t stand for Cloud Experience Host, but Connected eXperience Handler!!! Thanks to garlin who explained it <a href=\"https:\/\/www.elevenforum.com\/t\/a-new-way-to-create-a-local-user-account-better-than-oobe-bypassnro.34784\/page-2#post-581395\">here<\/a>.<\/p>\n\n\n\n<p><strong>Old Post<\/strong><\/p>\n\n\n\n<p>Another 2 <a href=\"https:\/\/twitter.com\/Hexacorn\/status\/1482124987276439553\">bits<\/a> I <a href=\"https:\/\/twitter.com\/Hexacorn\/status\/1482125896773472256\">posted<\/a> to Twitter &#8212; noticed that there is a built-in &#8220;ms-cxh&#8221; handler that was unknown to me (CXH stands for Connected eXperience Handler) and there is also its near cousin &#8220;ms-cxh-full&#8221; (which I spotted while I was looking at the Registry settings for ms-cxh). <\/p>\n\n\n\n<p>The first one accepts a number of strings which in return launch dedicated Dialog\/Wizard offering specific Windows functionality including adding new user, changing PIN, password, etc.  f.ex.:<\/p>\n\n\n\n<p>ms-cxh:\/\/SETADDNEWUSER<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><a href=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/SETADDNEWUSER.png\"><img decoding=\"async\" src=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/SETADDNEWUSER.png\" alt=\"\" class=\"wp-image-7911\" width=\"550\" srcset=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/SETADDNEWUSER.png 753w, https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/SETADDNEWUSER-300x204.png 300w\" sizes=\"(max-width: 753px) 100vw, 753px\" \/><\/a><\/figure><\/div>\n\n\n<p>ms-cxh:\/\/NTHENTNGCONLY<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large is-resized\"><a href=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/NTHENTNGCONLY.png\"><img decoding=\"async\" src=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/NTHENTNGCONLY.png\" alt=\"\" class=\"wp-image-7912\" width=\"550\" srcset=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/NTHENTNGCONLY.png 783w, https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/NTHENTNGCONLY-300x237.png 300w, https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2022\/01\/NTHENTNGCONLY-768x606.png 768w\" sizes=\"(max-width: 783px) 100vw, 783px\" \/><\/a><\/figure><\/div>\n\n\n<p>List of available strings I found in Windows binaries:<\/p>\n\n\n\n<ul>\n<li>ms-cxh:\/\/AADPINRESETAUTH<\/li>\n\n\n\n<li>ms-cxh:\/\/AADSSPR<\/li>\n\n\n\n<li>ms-cxh:\/\/AADWEBAUTH<\/li>\n\n\n\n<li>ms-cxh:\/\/FRX\/AAD<\/li>\n\n\n\n<li>ms-cxh:\/\/FRX\/INCLUSIVE<\/li>\n\n\n\n<li>ms-cxh:\/\/FRX\/INCLUSIVE?start=OobeProvisioningStatus<\/li>\n\n\n\n<li>ms-cxh:\/\/FRX\/TEAMEDITION<\/li>\n\n\n\n<li>ms-cxh:\/\/FRXRDXINCLUSIVE<\/li>\n\n\n\n<li>ms-cxh:\/\/MOSET\/AADLOCAL<\/li>\n\n\n\n<li>ms-cxh:\/\/MOSET\/CONNECTTOWORK<\/li>\n\n\n\n<li>ms-cxh:\/\/mosetmamconnecttowork?mode=mdm&amp;username=%s&amp;servername=%s<\/li>\n\n\n\n<li>ms-cxh:\/\/mosetmdmconnecttowork<\/li>\n\n\n\n<li>ms-cxh:\/\/MOSETMSA<\/li>\n\n\n\n<li>ms-cxh:\/\/MOSETMSALOCAL<\/li>\n\n\n\n<li>ms-cxh:\/\/MSACFLPINRESET<\/li>\n\n\n\n<li>ms-cxh:\/\/MSACFLPINRESETSIGNIN<\/li>\n\n\n\n<li>ms-cxh:\/\/MSACXSIGNINAUTHONLY<\/li>\n\n\n\n<li>ms-cxh:\/\/MSACXSIGNINPINADD<\/li>\n\n\n\n<li>ms-cxh:\/\/MSACXSIGNINPINRESET<\/li>\n\n\n\n<li>ms-cxh:\/\/MSAPINENROLL<\/li>\n\n\n\n<li>ms-cxh:\/\/MSAPINRESET<\/li>\n\n\n\n<li>ms-cxh:\/\/MSARDX<\/li>\n\n\n\n<li>ms-cxh:\/\/MSASSPR<\/li>\n\n\n\n<li>ms-cxh:\/\/NTH<\/li>\n\n\n\n<li>ms-cxh:\/\/NTH\/AADRECOVERY<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHAADNGCFIXME<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHAADNGCONLY<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHAADNGCRESET<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHAADNGCRESETDESTRUCTIVE<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHAADNGCRESETNONDESTRUCTIVE<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHAADORMDM?ngc=enabled<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHENTNGCFIXME<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHENTNGCONLY<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHENTNGCRESET<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHENTNGCRESETDESTRUCTIVE<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHENTORMDM<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHENTORMDM?ngc=enabled<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHNGCUPSELL<\/li>\n\n\n\n<li>ms-cxh:\/\/NTHPRIVACY<\/li>\n\n\n\n<li>ms-cxh:\/\/RDXRACSKUINCLUSIVE<\/li>\n\n\n\n<li>ms-cxh:\/\/SCOOBE<\/li>\n\n\n\n<li>ms-cxh:\/\/SCOOBE%ws<\/li>\n\n\n\n<li>ms-cxh:\/\/SCOOBE\/UPGRADE<\/li>\n\n\n\n<li>ms-cxh:\/\/SETADDLOCALONLY<\/li>\n\n\n\n<li>ms-cxh:\/\/SETADDNEWUSER<\/li>\n\n\n\n<li>ms-cxh:\/\/SETCHANGEPWD<\/li>\n\n\n\n<li>ms-cxh:\/\/SETPHONEPAIRING<\/li>\n\n\n\n<li>ms-cxh:\/\/SETPHONEPAIRING?scenarioId=SwiftKeyCloudClipboard<\/li>\n\n\n\n<li>ms-cxh:\/\/setsqsalocalonly<\/li>\n\n\n\n<li>ms-cxh:\/\/TSET\/ADDFAMILY<\/li>\n\n\n\n<li>ms-cxh:\/\/WLT<\/li>\n\n\n\n<li>ms-cxh:\/\/WLTUC<\/li>\n<\/ul>\n\n\n\n<p>When I tested ms-cxh-full &#8211; I just ran opened &#8220;ms-cxh-full:\/\/foo&#8221; from Run dialog box and it messed up the desktop of the test system by blocking any window from being visible\/interactive (with some exception for Taskbar, and Taskbar previews). Interestingly, when I posted it <a href=\"https:\/\/twitter.com\/SoloCarry6\">@SoloCarry6<\/a> and <a href=\"https:\/\/twitter.com\/cyb3rops\">@cyb3rops<\/a> <a href=\"https:\/\/answers.microsoft.com\/en-us\/windows\/forum\/all\/my-laptop-shows-a-black-screen-and-wont-load\/8615b723-c9a7-430b-91da-1bc3b76f7f4d\">pointed<\/a> me to some other posts on the internet where people ran &#8220;ms-cxh-full:\/\/0&#8221; and got their desktop locked. Since no one knew how to disable it, here&#8217;s a quick solution:<\/p>\n\n\n\n<ul>\n<li>Press WIN+R  &#8212; this will open invisible Run dialog box<\/li>\n\n\n\n<li>Run &#8220;taskkill \/f \/im UserOOBEBroker.exe&#8221; &#8212; this will terminate the &#8220;UserOOBEBroker.exe&#8221; process.<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Update On Windows 25H2 ms-cxh-full:\/\/foo and ms-cxh-full:\/\/0 don&#8217;t seem to work anymore. You can still run f.ex.: ms-cxh-full:\/\/FRX\/INCLUSIVE This will initially show the black screen and then the OOBE wizard will kick in. When the screen is still black, you &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2022\/01\/16\/ms-cxh-and-ms-cxh-full-handlers\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[53,1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/7910"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=7910"}],"version-history":[{"count":8,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/7910\/revisions"}],"predecessor-version":[{"id":10348,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/7910\/revisions\/10348"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=7910"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=7910"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=7910"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}