/ Forside / Teknologi / Netværk / TCP/IP / Nyhedsindlæg
Login
Glemt dit kodeord?
Brugernavn

Kodeord


Reklame
Top 10 brugere
TCP/IP
#NavnPoint
Per.Frede.. 4668
BjarneD 4017
severino 2804
pallebhan.. 1680
EXTERMINA.. 1525
xou 1455
strarup 1430
Manse9933 1419
o.v.n. 1400
10  Fijala 1204
Ingen adgang via login (med netværk)
Fra : Brian


Dato : 30-01-01 12:42

Jeg har nu fuldt denne vejledning
http://registry.winguides.com/display.php/629/ hvor man kan nægte adgang for
en bruger der ikke logger sig på computeren. (dvs. trykker på annullere ved
login prompten) Det virker godt nok hvis computeren ikke bruges i netværk.


Men hvad nu, når vi har et netværk og skal nægte en bruger adgang når han
trykker annullere. Det er jo ikke sikkert, at han har været inde på
computeren før. Så der skal først oprettes en ny konto på den pågældende
computer.

I bund og grund gør det eksempel oven over det, at alle brugere det IKKE
står registeret i bruger configen på den pågældende computer kan ikke logge
ind. Og da alle brugere ligger nede på serveren, så er det der den skal
hente data.

Maskinerne køre med win98. Jeg ved godt de ikke er beregnet til den slags
'sikkerhed' men det må da være muligt at få annuller knappen til at afbryde
login processen...

Er der nogen der kan hjælp? Evt. med et program...?

Med venlig hilsen
Brian




 
 
Bjarne Duelund (30-01-2001)
Kommentar
Fra : Bjarne Duelund


Dato : 30-01-01 18:40

Hej Brian

"Brian" <tcp33@hotmail.com> skrev i en meddelelse
news:95697v$1520$1@news.net.uni-c.dk...
>
> Maskinerne køre med win98. Jeg ved godt de ikke er beregnet til den slags
> 'sikkerhed' men det må da være muligt at få annuller knappen til at afbryde
> login processen...


Postet af Thorkil Olesen, 5/11-2000:
--------------------------------------------------------------
Der findes en mulighed, som tidligere har være citeret er i gruppen:

The Windows Guard Booth

Let's not mince words: The Windows log-in dialog box sure is
ridiculous. It sits there, asking for a user name and password. If supplied with
a user name it hasn't seen before, Windows lets the stranger in. If someone
wants to provide no information at all, they can simply press Escape. Granted,
Windows 9x was not designed to be a secure operating system, but wouldn't it be
nice if there were a simple way to ensure that only certain user name and
password
combinations could get past that log-in box?
Hack the Registry just a bit, and you can control who logs on to your PC. Before
performing this hack, however, take the following important setup steps, or you
may lock yourself out of your own PC.
You must begin by enabling user profiling on your system. Select Start,
Settings, Control Panel, double-click Passwords, and click the User Profiles
tab. Select the option "Users can customize their preferences and desktop
settings." Also place checkmarks in front of both checkable options. Select OK.
Now create an account for yourself. From the Control Panel,
double-click Users and use the wizard to add a profile for yourself. If there is
no Users icon in your Control Panel, you're running the original version of
Windows 95, and need to take the following step instead: Choose Start, Shut
Down, select "Close all programs and log on as a different user," and click OK.
When the log-in dialog box appears, enter a new user name and password. Type the
password again when Windows asks for confirmation.
Now you're ready to hack the Registry. Start by navigating to the following key:
HKEY_USERS\.Default\Software\Microsoft\ Windows\CurrentVersion\Run With the Run
folder selected, select Edit, New, String Value. Type GoAway and press Enter to
give the value a name. Now double-click GoAway and enter rundll.exe
user.exe,EXITWINDOWS. Click OK. That's it--you can close RegEdit now.
The next time the Windows log-in box appears, you can log in with the user name
and password you assigned yourself. If anyone presses Escape or enters a new
user name and password, however, Windows will think it over for a bit, and then
immediately log them out, returning them to the log-in dialog box.
This method is not foolproof--a savvy Windows user can probably find a way
around such a minimal security strategy. But it is certainly enough to keep
casual snoops out.
--------------------------------------------------------------

--
Mvh Barne Duelund, duelund@danbbs.dk
Opsætning af Win98SE ICS, Bootable CD-ROM, Fjernstyring med VNC m.m.:
http://www.danbbs.dk/~duelund/pcinfo/
!-! Remove _X_ from Email address


Brian (31-01-2001)
Kommentar
Fra : Brian


Dato : 31-01-01 10:50

Tak for svaret Bjarne, men det er det samme metode som mit link
(http://registry.winguides.com/display.php/629/) :(

"Bjarne Duelund" <_X_duelund@danbbs.dk> skrev i en meddelelse
news:q0Dd6.17409$fa3.891533@news010.worldonline.dk...
> Hej Brian
>
> "Brian" <tcp33@hotmail.com> skrev i en meddelelse
> news:95697v$1520$1@news.net.uni-c.dk...
> >
> > Maskinerne køre med win98. Jeg ved godt de ikke er beregnet til den
slags
> > 'sikkerhed' men det må da være muligt at få annuller knappen til at
afbryde
> > login processen...
>
>
> Postet af Thorkil Olesen, 5/11-2000:
> --------------------------------------------------------------
> Der findes en mulighed, som tidligere har være citeret er i gruppen:
>
> The Windows Guard Booth
>
> Let's not mince words: The Windows log-in dialog box sure is
> ridiculous. It sits there, asking for a user name and password. If
supplied with
> a user name it hasn't seen before, Windows lets the stranger in. If
someone
> wants to provide no information at all, they can simply press Escape.
Granted,
> Windows 9x was not designed to be a secure operating system, but wouldn't
it be
> nice if there were a simple way to ensure that only certain user name and
> password
> combinations could get past that log-in box?
> Hack the Registry just a bit, and you can control who logs on to your PC.
Before
> performing this hack, however, take the following important setup steps,
or you
> may lock yourself out of your own PC.
> You must begin by enabling user profiling on your system. Select Start,
> Settings, Control Panel, double-click Passwords, and click the User
Profiles
> tab. Select the option "Users can customize their preferences and desktop
> settings." Also place checkmarks in front of both checkable options.
Select OK.
> Now create an account for yourself. From the Control Panel,
> double-click Users and use the wizard to add a profile for yourself. If
there is
> no Users icon in your Control Panel, you're running the original version
of
> Windows 95, and need to take the following step instead: Choose Start,
Shut
> Down, select "Close all programs and log on as a different user," and
click OK.
> When the log-in dialog box appears, enter a new user name and password.
Type the
> password again when Windows asks for confirmation.
> Now you're ready to hack the Registry. Start by navigating to the
following key:
> HKEY_USERS\.Default\Software\Microsoft\ Windows\CurrentVersion\Run With
the Run
> folder selected, select Edit, New, String Value. Type GoAway and press
Enter to
> give the value a name. Now double-click GoAway and enter rundll.exe
> user.exe,EXITWINDOWS. Click OK. That's it--you can close RegEdit now.
> The next time the Windows log-in box appears, you can log in with the user
name
> and password you assigned yourself. If anyone presses Escape or enters a
new
> user name and password, however, Windows will think it over for a bit, and
then
> immediately log them out, returning them to the log-in dialog box.
> This method is not foolproof--a savvy Windows user can probably find a way
> around such a minimal security strategy. But it is certainly enough to
keep
> casual snoops out.
> --------------------------------------------------------------
>
> --
> Mvh Barne Duelund, duelund@danbbs.dk
> Opsætning af Win98SE ICS, Bootable CD-ROM, Fjernstyring med VNC m.m.:
> http://www.danbbs.dk/~duelund/pcinfo/
> !-! Remove _X_ from Email address
>



Henrik Kruse Jensen (31-01-2001)
Kommentar
Fra : Henrik Kruse Jensen


Dato : 31-01-01 19:44

Hej Brian prøv dette

> Er der nogen der kan hjælp? Evt. med et program...?
Prøv at oprette (på klienterne) en DWord-værdi på følgende lokation i
reg.databasen:
HKEY_LOCAL_MACHINE\Network\Logon.
Dens navn skal være: MustBeValidated.
Og den skal tildeles værdien: 1.
Det fastlåser ikke domænenavnet men måske det alligevel kan hjælpe dig??
Jeg skulle mene, at det gør det umuligt at komme uden om log-on
proceduren, med mindre man starter op i fejlsikret tilstand,
selvfølgelig.

MVH Henrik



Søg
Reklame
Statistik
Spørgsmål : 177528
Tips : 31968
Nyheder : 719565
Indlæg : 6408702
Brugere : 218887

Månedens bedste
Årets bedste
Sidste års bedste