So.
TO execute files before logging into windows and thus getting rid of the permissions applied to logged in users...
Requirements:
- A Windows operating system that has permissions that need to be bypassed (2000, XP, Etc)
- Basic Registry knowledge
- Access to the registry (either regedit.exe or regedt32.exe)
- Permission granted to change the registry strings needed
First:
Open the registry editor that you are going to use.
- TO do this either,
- Go to >Start > Run , then type in "Regedit"
- Go to >start > Run , then type in "Regedt32"
(Without the Quotation Marks and for further reference never include the quotation marks)
(Personally I like "regedit" better but I'm just saying that there are variables)
*Note*
There are many ways to access the registry (batch files, through the GUI, command prompt, etc) - Now that you have gotten into the registry you should see a bunch of folder-like icons on the left side of the screen.
- For "regedit" there are 5 folders that show up under "My Computer"
- HKEY_CLASSES_ROOT
- HKEY_CURRENT_USER
- HKEY_LOCAL_MACHINE
- HKEY_USERS
- HKEY_CURRENT_CONFIG
- For "Regedt32" there are 5 windows instead of 5 expandable folders
- At this point we have to find the piece of data that we are going to edit.
- For "regedit" expand the "HKEY_USERS" key by clicking on the small plus sign on the right of words "HKEY_USERS"
- For "Regedt32" expand the "HKEY_USERS" key by double clicking the "HKEY_USERS" folder.
(For Regedt32 the folders need to be double-clicked instead of single clicked as in Regedit to be expanded)
- Now that the "HKEY_USERS" is expanded there should be a bunch of folders under it including a folder called ". DEFAULT"
- Expand it.
- We are now in "HKEY_USERS. DEFAULT"
- Underneath the ". DEFAULT" expand a folder called "Control Panel"
- Right now we are in "HKEY_USERS. DEFAULTControl Panel"
- Now a folder should be visible that is called "desktop"
- This time instead of expanding the folder we need to view the contents on the folder.
- To do this single-Click the word "desktop"
- You should see a bunch of items appear in the window in the right side of the registry display.
- On the right side there are a list of items.
- Scroll down to the item called "SCRNSAVE.EXE"
- Double click on it
- Change the value of "SCRNSAVE.EXE" to the file that is going to be executed before windows logon
- Now go to the item that says "ScreenSaveTimeOut"
- Double click it
- Change its value to the time it takes for the file that is going to be executed when nobody moves the mouse (In seconds)
- You might need to change the values of
- "ScreenSaveActive" to 1
- "ScreenSaverIsSecure" to 0
- Refresh the registry by hitting "F5" on the keyboard
- restart the computer and voila you got the application to run.
Some applications that could be executed before windows start that might have some uses
--- Application Name ------------------ Executable name ---------------
- Command Prompt ---cmd.exe
- Registry editor ---Regedit.exe/Regedt32.exe
- A key logger------------
*Other Notes*
- I have realized when I opened cmd.exe and then typed in "explorer" would boot
up a windows shell.. Might have some interesting uses
=====================================================
THE ABOVE ARTICLE WAS FOUND here.
That's all
kkkk