Bypass domain logon

fillcakes · 04-12-2005, 12:39 PM

I've been working for a local school for 3 years as a IT support and have been able to resolve most of their hardware & networking problems

They had some computers supplied by a company who have installed some hidden lock out software that prevents me from escaping from the domain login and logging on locally.

Many of their PCs have had hard drive failures (Fujitsu) and I have been able to get round the lock out by ghosting where possible.

However, I now need to rebuild a system and I have spent hours trying to locate the program that runs on boot which disables the f8 function on machine boot and has disabled the esc function on login.

The school don't want to have any further dealings with this company and have entrusted me to sort it out.

Does anyone know where I can look to edit the disabled functions? I've attached a zip file containing setuplog, bootuplog, runonceex text. Run once I notice is part of the login script.
Cheers

Inaris · 04-12-2005, 01:50 PM

first what version of OS is it using?
second, can you access the registry?
What is the company that made these machines?

fillcakes · 04-12-2005, 01:57 PM

Windows 95
Yes, I've hooked up the drive to USB caddy and can see it from my XP PC
Local PC supplier in Birmingham UK called Tempus

imported_big_B · 04-12-2005, 03:16 PM

post HijackThis log, maybe someone can find something suspicious

uzi9mm · 04-12-2005, 03:34 PM

Just type in a random user name and a random domain that does not exsist and you will allowed access to the computer but not the network. After that I would install anti-policy and edit the registry.

fillcakes · 04-12-2005, 03:49 PM

Sorry what do you mean by post Hi Jack this Log?

fillcakes · 04-12-2005, 03:50 PM

Thank you uzi

That's precisely my question, where in the registry do I find the key to alter the settings for disabling the lock out?

04-12-2005, 12:39 PM	#1 (permalink)
fillcakes Newb Techie Join Date: Apr 2005 Posts: 20	Bypass domain logon I've been working for a local school for 3 years as a IT support and have been able to resolve most of their hardware & networking problems They had some computers supplied by a company who have installed some hidden lock out software that prevents me from escaping from the domain login and logging on locally. Many of their PCs have had hard drive failures (Fujitsu) and I have been able to get round the lock out by ghosting where possible. However, I now need to rebuild a system and I have spent hours trying to locate the program that runs on boot which disables the f8 function on machine boot and has disabled the esc function on login. The school don't want to have any further dealings with this company and have entrusted me to sort it out. Does anyone know where I can look to edit the disabled functions? I've attached a zip file containing setuplog, bootuplog, runonceex text. Run once I notice is part of the login script. Cheers

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

04-12-2005, 01:50 PM	#2 (permalink)
Inaris Master Techie Join Date: Oct 2003 Posts: 2,258	first what version of OS is it using? second, can you access the registry? What is the company that made these machines?

04-12-2005, 01:57 PM	#3 (permalink)
fillcakes Newb Techie Join Date: Apr 2005 Posts: 20	Windows 95 Yes, I've hooked up the drive to USB caddy and can see it from my XP PC Local PC supplier in Birmingham UK called Tempus

04-12-2005, 03:16 PM	#4 (permalink)
imported_big_B Newb Techie Join Date: Jan 2005 Posts: 49	post HijackThis log, maybe someone can find something suspicious

04-12-2005, 03:34 PM	#5 (permalink)
uzi9mm Master Techie Join Date: Dec 2004 Location: Fort Lewis, WA Posts: 2,514	Just type in a random user name and a random domain that does not exsist and you will allowed access to the computer but not the network. After that I would install anti-policy and edit the registry.

04-12-2005, 03:49 PM	#6 (permalink)
fillcakes Newb Techie Join Date: Apr 2005 Posts: 20	Sorry what do you mean by post Hi Jack this Log?

04-12-2005, 03:50 PM	#7 (permalink)
fillcakes Newb Techie Join Date: Apr 2005 Posts: 20	Thank you uzi That's precisely my question, where in the registry do I find the key to alter the settings for disabling the lock out?