1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

startup script

Discussion in 'Windows XP' started by uh60pilot, 2005/05/17.

Thread Status:
Not open for further replies.
  1. 2005/05/17
    uh60pilot

    uh60pilot Inactive Thread Starter

    Joined:
    2005/04/26
    Messages:
    14
    Likes Received:
    0
    I am currently having a problem with one of my users that is apparently using some sort of program to change my administrator password. I would like to create a startup script so that everytime the computer boots it resets it's password to the password I create. The computer is on a domain and I have a domain admin account that I can reset this local password with (if that is needed). I have never done anything with startup scripts so I have no idea where to start here. Any help would be appreciated.

    the following is a little batch script that I thought would possibly work.
    @ECHO OFF
    ECHO.
    net user administrator goaway
    ECHO.
    CLS
    EXIT
     
    Last edited: 2005/05/17
    uh60pilot,
    #1
  2. 2005/05/17
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    That batch file would probably work (never tried it with the local admin account but it works with others) but there is a problem. It won't run unless you are logged on with an admin account when you run it. Can't be run when the PC is booting up.

    Some details about how the password is being changed would help and to make sure I'm clear, is it a local PC admin password or your domain admin password?
     
    Newt,
    #2


  3. to hide this advert.

  4. 2005/05/17
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    This is the KEY thing to know more about. The only way the admin password can be changed is by using software, either on a boot cd running linux or dos, or by using a utility app such as system internals admin package. Find out what exactly this user is doing to gain admion access. He may be using a keylogger that emails him YOUR keystrokes! he need only access your account one time to install such software and no matter how many time you change the passswords he will know what they are.
     
    TonyT,
    #3
  5. 2005/05/18
    uh60pilot

    uh60pilot Inactive Thread Starter

    Joined:
    2005/04/26
    Messages:
    14
    Likes Received:
    0
    I don't think he has a keylogger or he would be using my domain admin account but instead he is just using the local admin account which is annoying to say the least. I believe he is using erd commander to change it but I know there are some other programs out there to do it.
     
    uh60pilot,
    #4
  6. 2005/05/18
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    If he has the ERD Commander CD, you got a problem. OTOH, the licensed version is expensive and most folks don't have it. The trial version will quit working after 30 days.

    If he is running it from a network share or a local hard drive copy, you can easily lock him out of that.

    Some sort of administrative action (like getting the bozo fired) might be a more realistic option. Also might work to use gpedit.msc and disable CD access for that workstation.
     
    Newt,
    #5
  7. 2005/05/19
    uh60pilot

    uh60pilot Inactive Thread Starter

    Joined:
    2005/04/26
    Messages:
    14
    Likes Received:
    0
    Thanks for the help. I'll let you know how things go.
     
    uh60pilot,
    #6
  8. 2005/05/20
    NetDoc

    NetDoc Inactive

    Joined:
    2005/01/09
    Messages:
    215
    Likes Received:
    0
    If you do not already have it, get some sort of acceptable use policy written up and be sure to include this type of conduct. If the policy exists, use it to try to stop the bozo. Get the "higher-ups" to realize that this is a serious matter.

    DRD
     
    NetDoc,
    #7
  9. 2005/05/21
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    If he's using ERD Commander you can, as was stated above, lock him out of that, but he could also be using linux utilities that you cannot stop him from running.
    http://home.eunet.no/~pnordahl/ntpasswd/
     
    TonyT,
    #8
  10. 2005/05/21
    NetDoc

    NetDoc Inactive

    Joined:
    2005/01/09
    Messages:
    215
    Likes Received:
    0
    Most of these utilities require booting from the CD or Floppy. Disable this in the BIOS settings and then lock BIOS access.

    DRD
     
    NetDoc,
    #9
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...