tibbar
anyone know how to make users with the net command that won't appear on the XP login screen?

i.e. c:\windows\system32\net user admin admin /add
c:\windows\system32\net localgroup administrators /add admin

will create a user called admin
but will be visible to everyone at xp login screen.

how do you create 'silent' users, like the default ones e.g. helpadministrator etc.

thanx
Uniter
I believe its in user tags somewhere in the registry
those seeming random CLSSID tags
or those cryptic
s-0-1-0002--12121-Bill-Gates-Ownz-joo

hope this will help in some random way
G-Ryder
I can't remember exacly.. but you could try as adding them as Domain Controler or something along those lines.. I dont think that shows up on the login screen.
boshcash
search google, ago , i read a way to remove a created user from the windows xp logon screen , thats done by modifying the registry
The Only JoVo
why not use the following command also :

net user "user" /EXPIRES:never

so u know that the user never expires.
tibbar
well that doesn't answer the question. the problem is how to make a user that wont be visible to the end user at the xp login screen. it must be possible, and i cant imagine it's that hard to do.

e.g. if u install visual studio.net, u get an extra user called sqldebugger, which is only visible by typing net user in dos.

come on people, some one must know the answer to this...
Daxziz
Currently I only know one tweak for this function in general, and that's sadly not thru' cmd.exe - anyway here it goes:

Start RegEdit. Locate and go to: "HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\WINLOGON\SpecialAccounts\Userlist"

Here you'll have to create a new DWORD value, with *EXACT* the same name as the user you wish to hide.

This is however IMO not bad to know - running the correct applications will quickly do this for you.


-Daxziz
tibbar
thanx, that's just what i was after. rolleyes.gif
Wolfman
Infact, if you give the value "10000" to that DWORD, you can hide all users starting with that name:

ex:
Users-> hack_filler, hack_leech, hack_leechers

DWORD "hack_" VALUE "10000"

Cya
Wolfman
ghost_c
thnks 4 the info i'll try it.... cool.gif
jetprice
QUOTE (The Only JoVo @ Oct 20 2003, 05:26 PM)
why not use the following command also :

net user "user" /EXPIRES:never

so u know that the user never expires.

... net user username /delete ...
^Nio^
QUOTE (Daxziz @ Oct 21 2003, 10:54 PM)
Currently I only know one tweak for this function in general, and that's sadly not thru' cmd.exe

Good thing there are applications that can edit the registry through cmd, or just cre8 a batch file that does that 4 u... rolleyes.gif

Thnx 4 the info btw smile.gif
Daxziz
...code it yourself - WYSIWYG wink.gif


-Daxziz
DJVASTVASTY2K
Good Topic Tibbar wink.gif

@ Daxziz, WolfMan

Thanks 4 The Info Guys
This Will Deffinetley Be UseFull wink.gif

OFF TOPIC:

Is It Possible To Get Higher Account With A Normal User Account Access Level And Guest ??

ie: have target host details user/pass
netbios says the user :joebloggs is a normal user.

Is it possible to get higher account access ie: create drive shares, set default shares wink.gif

Best Regards

Adam

Vast Gsm Team

Da Sick Crew
UNDERTAKER
can any one please upload an exmple batch file for that(invisible users)?

10x 4 all the helpers!

Daxziz
@ DJVASTVASTY2K - NP;)

To your offtopic question. It sorta depends on what system you are.
The easiest thing would probably be to upload pwdump and extract the info from the SAM. Then uses LC4 to bruteforce the passwords AT YOUR OWN COM.

This will most likely give the accounts you want, of course it does require that your current guest account can upload and execute files.


-Daxziz
UNDERTAKER
any1?
Daxziz
Here ya go, UnderTaker - please be patient.


-Daxziz
tareq
great job (batch file) MR. Daxziz

i will try it.
tibbar
one thing you also need to remember, is that windows will automatically create a folder for the new user in document and settings, containing desktop etc.

so this will need to be manually deleted...
flame
thanks for the tips daxziz wink.gif
i allways like to learn new bat stuff
that echo into a reg file is cool (how come i didnt think about it, allways going for the hard way) anyway.
me like this phorum!!!
Daxziz
I've only shown a little of what I think is needed. You should dig into hiding the stuff you do more yourself.

Let me help so much and say: "Policies"


-Daxziz
UNDERTAKER
Great job Daxziz... sorry for my short patient...
10x a lot!!!
I also love very much this forum!!!
NeO``
Very nice post but i think u didn't have to post the bat...thx anyway
Mr_X
Here's an exe (I quickly made it myself) that puts an invisible user in administrator group (no matter what's the name of the administrator group). You must be administrator to do that
syntax:
Hideuser.exe username pass
or
Hideuser.exe username
-------> You'll be asked for a pass
or
Hideuser.exe
--------> You'll be asked for an username and a pass
Mr_X
I made a little update: if you only type exe name, it asks you if you wish to add a new user.
Daxziz
@NeO`` - People asked wink.gif


-Daxziz
UNDERTAKER
10x a lot all of you!!!
gr8 job!!!
NeO`` i asked and they answered biggrin.gif
DJVASTVASTY2K
QUOTE (Daxziz @ Nov 8 2003, 02:42 PM)
@ DJVASTVASTY2K - NP;)

To your offtopic question. It sorta depends on what system you are.
The easiest thing would probably be to upload pwdump and extract the info from the SAM. Then uses LC4 to bruteforce the passwords AT YOUR OWN COM.

This will most likely give the accounts you want, of course it does require that your current guest account can upload and execute files.


-Daxziz

Hello M8

Sorry 4 The Late Reply CPU Failed Had 2 Buy A New 1

I Had A Feeling It Would Be "pwdump"----->extract from same------->bruteforce LC4.

But I thought maybe there is an easier way like a local loop flaw.

Thanks 4 The Reply's M8 Very Much Appreciated smile.gif

Best Regards

Adam

Vast Gsm Team

Da Sick Crew
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.