Windows xp authentication message. How to disable Windows XP authentication notification? Delete the folder KB905474

Microsoft stopped supporting Windows XP in 2014, but this does not stop some users: the legendary OS continues to be installed on computers and serves to the best of its functionality. But if there is no official support, then there is no licensed version - so you have to use pirated assemblies downloaded from torrent trackers.

The problem is that even in such conditions you can encounter problems with system authentication. And although most creators of various assemblies cut everything from the distribution extra files, responsible for auto-updates, it will still be useful for you to know how to disable Windows authentication.

General information

How do you know if your system is being authenticated?
It’s very simple - if you use a pirated assembly, messages will appear on the screen at startup notifying you that the system has not passed the test (unlicensed software is used, etc.).

These messages do not cause any harm to the system - they are only a reminder that it would be nice to switch to a licensed Windows version.

If this is not your plan, but you want to get rid of annoying notifications, then you need to remove the verification function.

Disabling verification

So, you have installed Windows XP and are faced with a message that you need to install a licensed copy. To get rid of this notification once and for all, you can use several methods.

Working with the registry


Deleting files

After the reboot, you need to remove from the system the files responsible for running authentication. To do this, go to the “system32” folder in the “Windows” directory on the system drive and delete the files LegitCheckControl.dll., WgaLogon.dll. and WgaTray.exe.
More posts about possible problems They won't bother you with licensing.

The files listed are usually hidden. To make them visible and remove them:


"Folder Options" can also be found through the "Control Panel". Further actions are completely identical to the instructions described above.

Removing a WGA Service

In principle, the methods described above should be enough for you to stop checking the system every time you start it. However, you can go further and completely remove the KV905474 update, which is responsible for authentication. To remove it from the system, open Control Panel and go to the Add or Remove Programs window.

On the Change or Delete tab, check Show Updates. Select update KV905474 (Windows Genuine Advantage) from the list and uninstall it as a regular program.

There are several other ways to disable authentication - for example, using special patches and cracks, such as WGA Validation 1.9.9.1 Crack.

However, in most cases, standard Windows tools, so there is no need to download additional software.

On the screens of those computers that use an unactivated version of Windows 7 or the activation failed after the update, the following message is displayed: "Your copy of Windows is not genuine" or a message of similar meaning. Let's figure out how to remove the annoying notification from the screen, that is, disable authentication.

There are two options for disabling authentication in Windows 7. Which one to use depends on the user's personal preferences.

Method 1: Editing the Security Policy

One of the options for solving this problem is to edit the security policy.

  1. Click "Start" and go to "Control Panel".
  2. Open section "System and safety".
  3. Follow the inscription "Administration".
  4. A list of tools will open in which you should find and select "Local politics...".
  5. The Security Policy Editor will open. Right click ( RMB) by folder name "Restricted Use Policy..." and from the context menu select "Create a policy...".
  6. After this, a number of new objects will appear on the right side of the window. Go to the directory "Additional Rules".
  7. Click RMB on an empty space in the directory that opens and select the option from the context menu “Create a hash rule...”.
  8. The rule creation window opens. Click the button "Review…".
  9. A standard file opening window opens. In it you need to go to the following address:

    C:\Windows\System32\Wat

    In the directory that opens, select the file called "WatAdminSvc.exe" and press "Open".

  10. After completing these steps, you will be returned to the rule creation window. In his field "File Information" The name of the selected object will be displayed. From the dropdown list "Security level" select value "Forbidden", and then press "Apply" And "OK".
  11. The created object will appear in the directory "Additional Rules" V "Security Policy Editor". To create the next rule, click again RMB on an empty space in the window and select “Create a hash rule...”.
  12. Again, in the rule creation window that opens, click "Review…".
  13. Go to the same folder called "Wat" at the address given above. This time select the file with the name "WatUX.exe" and press "Open".
  14. Again, when you return to the rule creation window, the name of the selected file will be displayed in the corresponding area. Again, select the element from the security level selection drop-down list "Forbidden", and then press "Apply" And "OK".
  15. The second rule has been created, which means that OS authentication will be disabled.

Method 2: Deleting files

The problem posed in this article can also be solved by deleting some system files responsible for the verification procedure. But before that, you should temporarily disable the standard antivirus, « Windows Firewall» , remove one of the updates and deactivate a specific service, since otherwise problems may occur when deleting the specified OS objects.

  1. After you have deactivated your antivirus and "Windows Firewall", go to the section already familiar from the previous method "System and safety" V "Control Panels". This time open the section "Update centre".
  2. A window opens "Update Center". Click on the inscription on the left side of it "Viewing the log...".
  3. In the window that opens, click on the inscription to go to the update removal tool "Installed updates".
  4. A list of all updates installed on your computer will open. You need to find an element in it KB971033. To make your search easier, click on the column title "Name". This will list all updates in alphabetical order. Search in a group "Microsoft Windows".
  5. Having found the desired update, select it and click on the inscription "Delete".
  6. A dialog box will open where you need to confirm the removal of the update by clicking on the button "Yes".
  7. After the update is removed, you need to disable the service "Software Protection". To do this, go to the section "Administration" V "Control Panels", which has already been discussed when considering Method 1. Open element "Services".
  8. Starts "Service Manager". Here, just as when deleting updates, you can arrange the list items in alphabetical order for ease of finding the desired object by clicking on the column name "Name". Having found the name , select it and click "Stop" on the left side of the window.
  9. The service responsible for software protection will be stopped.
  10. Now you can proceed directly to deleting files. Open "Conductor" and go to the following address:

    C:\Windows\System32

    If the display of hidden and system files is disabled, then you must first enable it, otherwise you simply will not find the necessary objects.

  11. In the directory that opens, find two files with a very long name. Their names begin with "7B296FB0". There won't be any more objects like this, so you can't go wrong. Click on one of them RMB and select "Delete".
  12. After the file is deleted, do the same procedure with the second object.
  13. Then return to "Service Manager", select the object "Protection software» and press "Run" on the left side of the window.
  14. The service will be activated.
  15. Next, do not forget to enable the previously deactivated antivirus and "Windows Firewall".

As you can see, if your system activation has failed, then it is possible to disable the annoying Windows message by deactivating authentication. This can be done by setting the security policy or by removing some system files. If necessary, everyone can choose the most convenient option for themselves.

» How to check and authenticate Windows XP?

How to check and authenticate Windows XP?

Windows XP Authentication is a process performed by Microsoft to determine whether a copy is valid installed version operating system and software profile of the hardware used and license key product. The presence of important license files and their integrity are also compared. All information is archived in a special file, which is stored in the operating system kernel. When subsequently downloading updates and licensed programs, such verification will not be required. Let's look at how to check and authenticate installed Windows XP, so that later you will not have problems downloading and installing updates and software.

What do you need to have for OS authentication?

For Windows checks XP needs to be defined:

  • if an OEM license is purchased, the certificate of authenticity is pasted on the processor case: the COA certificate indicates the name of the installed OS and a 25-digit key (Product Key);

  • If you purchased the boxed version of FPP, the certificate of authenticity is glued directly to the inside of the box: the COA certificate indicates the name of the installed OS and a 25-digit Product Key.


To confirm the right to use the installed Windows versions XP must retain all original components of the licensed product. The product components include: a box with an SOA stuck on it, an OS installation disk with a hologram and a printed version of the license. It is necessary to keep all available payment documents confirming the purchase of the product.

How to check the authenticity of Windows XP?

There are several methods to verify the authenticity of Windows XP. One of them is authenticating a copy of the operating system on the Microsoft website. By clicking on the “Check Now” button, you can check the installed version of the operating system online. If the authenticity of the OS components is confirmed, a message indicating a successful operation will appear.

The second method of OS authentication occurs when the user tries to install or update any Microsoft software products, such as Windows Media Player. During the installation process of the software product, a window pops up asking you to check the authenticity of Windows XP now. In this case, the installation or first launch of the software product may be blocked until the OS authentication procedure is completed.


To complete the procedure, you must click the “Check” button; after automatic successful verification, the application will be installed or launched in normal mode.

You can also verify the authenticity of Windows XP by downloading the “Windows Genuine Advantage Notifications” utility to your computer from the Microsoft website. This application will tell you whether the genuine version of the OS is installed or not. On the company's website, notes indicate that once the application is installed on your computer, it cannot be removed.

How to authenticate Windows XP?

When installing Windows XP and Microsoft software products through the corporation's website, various key options may be included in the delivery depending on the software:

  • Product Key;
  • multiple installation key (VLK-key);
  • activation key and others.

The presence of keys does not confirm the authenticity of Windows XP and software. The right of the PC owner to use the installed version of the OS is confirmed only by the presence of a license agreement and does not depend on the available keys. Therefore, using the same key for several copies of Windows XP or the key not matching the installed copy of the OS is not a sign of counterfeiting. The license agreement can be obtained electronically through the corporation's private websites. This agreement is as legitimate as the paper version.

To confirm the authenticity of the OS installed during the assembly process by the manufacturer, you must have a certificate of authenticity that is glued to the device body. If any parts of the SOA certificate were damaged during the assembly process, but the name of the operating system and protective elements are easy to read, further operation of the OS as a licensed version is possible. If any data cannot be read, the SOA certificate must be replaced.

It should be remembered that the replacement of the Windows XP certificate is currently suspended due to the withdrawal of this OS from sale. Therefore, to confirm the authenticity of the OS, it is recommended to install Windows XP from legitimate media that contains this SOA certificate.

If the certificate is installation disk is missing or lost, but all the keys are present, such an operating system cannot be used as a licensed one and must be replaced with a legitimate product. In this case, it is impossible to verify the authenticity of Windows XP.

» How to remove or disable Windows XP authentication?

How to remove or disable Windows XP authentication?

If you have an unlicensed version of Windows XP installed on your computer, then there is a high probability that authentication will be constantly carried out and various messages will be received, and in some cases the operating system may even be blocked. As a rule, a user with a pirated version of Windows XP may see the following messages:

  • The Windows Genuine Advantage Notification tool will notify you if the version of the operating system you purchased is not genuine.
  • You may have purchased an unlicensed version of the software. This copy of Windows XP has not been authenticated.
  • This copy of the software has not been tested and the issue is not resolved. The user will not be able to use the full range of updates and support from Microsoft.

These messages do not cause any harm to the user. In this case, they were created only to once again remind you of the lack of a license. But, as often happens, many people do not purchase official discs with licensed software (which can cost several hundred dollars), but ordinary copies made from such discs. And in most cases, no one cares how genuine their version of the operating system is - it works and works well. In this case, only one question arises: how to remove the authentication of the Windows XP operating system?

How do I disable or remove authentication?

Windows Genuine Advantage is a custom Windows authentication notification tool that is installed free of charge through Microsoft Windows Update. Previously for installation this tool responded to the critical update KV892130, and at the moment - the update KV905474, which is no different from it. The end result of such an update is exactly the above messages on the main Windows screen XP.

Today there are enough tools (activators, keys, “cracks”) that can be used to remove authentication. However, in most cases, antivirus programs recognize these programs as Trojan viruses. Therefore, you can try to do without them. Here's how to get rid of Windows Genuine Advantage notifications:

  • Using the special Autoruns utility, the WGALogon process is destroyed. You can also kill a process using the standard Task Manager (key combination Ctrl+Alt+Del or Ctrl+Shift+Esc);
  • Go to the folder where Windows XP is installed. As a rule, the standard path looks like this: C:/Windows/system32. Find the file WgaTray.exe and delete it (you can simply rename it). To ensure that authentication does not appear in the future, you can additionally delete the WGALogon.dll library file. It should be remembered that many system folders on the computer are hidden, and to display them you must specify “Show hidden files and folders” in the folder properties;

  • This point is a continuation of the previous one: copies of the above files are deleted from the hidden “dllcatch” folder;
  • Reboot the computer. After completing the procedure, authentication messages will no longer appear.

Removing the WGA service

As a rule, it is enough to complete all the previous steps so that the user is no longer bothered by pop-up messages. However, there is another way (even easier) that will help remove all notifications.

In Windows XP, the Windows Genuine Advantage service is installed as update KV905474 and can be removed through the standard “Add or Remove Programs” menu. In order to see this update, you need to check the box next to “Show updates”. Next, we find this update and remove it in the same way as other programs.

That's it - notifications will no longer bother the user!

How to remove the window This copy did not pass Windows authentication.

What to do if you see the following message: this copy of Windows is not authenticated, (also called the black screen of death). Of course, those who have a licensed version of the OS do not have to worry. It is not necessary to completely remove operating system, just take the advice. There is always a way out and we will activate (revive) the OS again, be it Windows XP or Windows 7.


In fact, all this is done by a small utility that poses virtually no danger, but only prevents images from running on the desktop screen - it assumes that your system is unlicensed and tries to tell you about it. In this case, a couple of files are registered in the system in the WINDOWS\system32\ folder directory:


  • WgaTray.exe, 329 KB in size, which actually triggers the notification itself

  • and the file WgaLogon.dll, 231 KB in size.

Remember one thing! After installing any non-licensed Windows, do not update the system, but uncheck the “update” box and there will be no problems.


But if it appeared on the desktop " black screen", with an inscription:


  • You may have purchased a counterfeit copy of the software

  • This copy of Windows has not been authenticated

Moreover, such a message constantly appears every time the system boots.


Well, let's try to return everything to normal. To do this, we will be interested in the section in Windows registry:



CurrentVersion\Winlogon\Notify\WgaLogon

How to clear the authentication message in Windows XP.


  1. Let's launch the registry editor, this is - (Start - Run - regedit - Enter)

  2. Next we find the registry section

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon


  3. After this, delete the entire WgaLogon section (those in doubt can first make a copy of this section)

  4. We reboot the system

After rebooting, the authentication message will disappear.

How to clear the authentication message in Windows 7

As for Windows 7, we remove it using the program RemoveWAT21 .


  1. Download this program(you can search for it on the Internet)

  2. Remove old activation

  3. Activate again

  4. And remove authentication forever

Detailed instructions are described in the program itself; the entire operation takes place in just three clicks.

How to authenticate Windows 7, XP

What needs to be done to remove the annoying notification? Based on the above, the answer suggests itself - delete or rename the files responsible for the notification. Also when installing an update KB905474, the system has created copies in the cache, which are located at the following address:


WINDOWS\system32\DllCache\ (WgaLogon.dll, WgaTray.exe)


which can also be deleted.


You can also solve the problem with the notification by making some changes in the Windows registry. The key responsible for the operation

Notices are located in the register at


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\Winlogon\Notify\WgaLogon.


We go to the registry via Start → run, dial the command regedit and, penetrating the branch to the key

WgaLogon, delete it.


When working with the registry, you need to be extremely careful not to make irreparable mistakes. For those who have no experience or are simply afraid of these manipulations, the program will come to the rescue Autoruns, which gives access to the registry and all processes running in it. Let's launch Autoruns, go to the tab Winlogon, uncheck the box next to the key WgaLogon, close the program and reboot. In the presented case, this key is not available, because Fortunately, the system is not affected by this muck. Also, by clicking on the tab Everything, you can gain access to all processes running in the system by cleaning

From malware and banners.


Top