Registry Entry

GovernmentSecurity.org > The Archives > General Network Security

chrispen

Dec 4 2003, 09:05 AM

i have found this link
http://www.petri.co.il/hide_user_from_welcome_screen.htm

saying how to hide the users from the XP screen. my question is , is this possible to be done into a .reg script so we just execute it and it auto-hides a specific account for us ?

sub0

Dec 4 2003, 10:19 AM

Yes its possible. It is very easy. Almost too easy to ask.

It is also possible to write a little app which does the same (edit: look few post beneath). This way the uder doesn't know something in the register is being changed. If a user has to add a .reg, windows will popup a message.

removeuser.reg

CODE

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]
"username"=dword:00000000

virus

Dec 4 2003, 10:37 AM

if you do the same in command prompt .... it won't give a pop up message.

QUOTE

reg add HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList /v username /t DWORD /d 00000000 /f

The above won't ask for confirmation ....

HTH

sub0

Dec 4 2003, 10:41 AM

QUOTE (virus @ Dec 4 2003, 10:37 AM)

if you do the same in command prompt .... it won't give a pop up message.
<quote>
The above won't ask for confirmation ....

HTH

not working at win98 (@work!, win98 sucks

)

sub0

Dec 4 2003, 12:33 PM

I just created a little console application that does the trick.
RemoveUser.exe

syntax: removeuser <username>

It just adds a key (named after input) to the register as described above.

edit:
Source code (Delphi)

Project1.dpr

CODE

program Project1;

uses
Forms,registry,
Unit1 in 'Unit1.pas';

{$R *.res}

begin
Application.Initialize;
Application.Run;
end.

unit1.pas

CODE

unit Unit1;

interface
uses Registry, Windows;

implementation

var
Reg :Tregistry;
argument: string;

procedure start;
begin
Reg := TRegistry.Create;
Reg.RootKey := HKEY_LOCAL_MACHINE;

if Reg.OpenKey('Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList',true)
then
begin
Reg.WriteBool(argument,false);
Reg.CloseKey;
Reg.Free;
end;

writeln;
writeln;
writeln('---------------------------------');
writeln('user '+argument+' removed from login');
writeln('---------------------------------');
writeln;
writeln;
end; //procedure start

procedure afsluiten; //afluiten: Dutch for exit
begin
writeln;
writeln;
writeln('----------------------');
writeln('syntax: removeuser <name>');
writeln('author: sub0');
writeln('----------------------');
writeln;
writeln;
end;

begin //main program
argument := ParamStr(1);
if ParamStr(1) = '' then
afsluiten else
start;
end. //main program

chrispen

Dec 4 2003, 12:48 PM

handy! thanks for all the replies dudes

sub0

Dec 4 2003, 01:55 PM

RemoveUser_gui.exe
Windows app. With GUI.

sub0

Dec 4 2003, 11:28 PM

anyone tested it already?

biboupoki

Dec 4 2003, 11:36 PM

thanx sub0 im gonna to it

TedOb1

Dec 6 2003, 02:18 AM

thanks for the code sub0

that could come in handy for many uses

hidden

Dec 6 2003, 09:40 AM

yeah thx mister subo

UnDeRTaKeR

Dec 6 2003, 10:25 AM

if anyone of you guys had search the forum you'll see that someone had already asked that question and there is some proggy's for that in that thread... also in exe format and batch files... so in the next time check before posting!

sub0

Dec 6 2003, 11:13 AM

QUOTE (UnDeRTaKeR @ Dec 6 2003, 11:25 AM)

if anyone of you guys had search the forum you'll see that someone had already asked that question and there is some proggy's for that in that thread... also in exe format and batch files... so in the next time check before posting!

What thread ... I haven't found it.

edit:

"if anyone of you guys had search the forum you'll see that someone had already asked that question..."

Since you are talking to me:
Do you espect me to search the forum first before i reply to any topic? Thats the task for the topicstart...
When someone just knows a similar topic is around, than he can point the topicstart to it, but don't espect every poster to search first when they want to reply.

UnDeRTaKeR

Dec 6 2003, 01:44 PM

well... at first place that gay had to search the forum... about the other ones im sorry... but what if anyone would make again the same thread... the forum will be flooded(others will make different threads about different issues that already was), and it will make me mad.. :\

*Sorry 4 my bad english

sub0

Dec 6 2003, 01:47 PM

QUOTE (sub0 @ Dec 6 2003, 12:13 PM)

...
What thread ... I haven't found it.
...

Undertaker ?

UnDeRTaKeR

Dec 6 2003, 02:34 PM

i ment that others could make other threads that was on the forum before.. ant it will kind of flood the forum....
and if you ment about this thread... there is another one like this... i saw it before..
it called if i remmber "hide user" or "invisible user"
and again sorry if i made you mad..

sub0

Dec 6 2003, 02:42 PM

QUOTE (UnDeRTaKeR @ Dec 6 2003, 03:34 PM)

So you tell him to use the search first, but you cant find the topic yourself

I agree with you that you have to use search (also google) first though, many users don't.
Lets forget about this now and ontopic, no hard feelings

UnDeRTaKeR

Dec 6 2003, 02:53 PM

I didnt search the topic... i could find him easly.. but never mind man...

sub0

Dec 6 2003, 03:03 PM

QUOTE (UnDeRTaKeR @ Dec 6 2003, 03:53 PM)

I didnt search the topic... i could find him easly.. but never mind man...

Why don't you post it than? Its relevant in this topic...
ok, let me see it.

virus

Dec 6 2003, 05:36 PM

cut it out guys ..... or someone is gonna end up kicked out the window.

UnDeRTaKeR

Dec 6 2003, 09:33 PM

sorry for acting like a kiddie :\

teest

Dec 15 2003, 02:33 PM

thx, I try removeuser_gui.exe

caligula

Dec 16 2003, 11:00 PM

hi
i am new here and cant make new topics
so i write this here

i heart there is a possibility to restart the explorer in xp by command after changing something in the registry
it should work as a reboot
so u dont have to reboot just to restart the xp explorer

contact me

caligula

no1

Dec 17 2003, 01:05 PM

nice

thx 4 gui version

super work

caligula

Dec 20 2003, 12:04 AM

noone knows about?

trinity

Dec 20 2003, 11:13 AM

Yes,
it works!
Thx

LittleHacker

Jan 17 2004, 01:16 AM

Thanks for your Nice Topic

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.