Government Security
Network Security Resources

Jump to content

Photo

Creating Invisible Users

- - - - - windows
  • Please log in to reply
28 replies to this topic

#1 tibbar

tibbar

    First Sergeant

  • Members
  • 1,423 posts

Posted 15 October 2003 - 05:06 PM

anyone know how to make users with the net command that won't appear on the XP login screen?

i.e. c:\windows\system32\net user admin admin /add
c:\windows\system32\net localgroup administrators /add admin

will create a user called admin
but will be visible to everyone at xp login screen.

how do you create 'silent' users, like the default ones e.g. helpadministrator etc.

thanx

#2 Guest_Uniter_*

Guest_Uniter_*
  • Guests

Posted 15 October 2003 - 07:20 PM

I believe its in user tags somewhere in the registry
those seeming random CLSSID tags
or those cryptic
s-0-1-0002--12121-Bill-Gates-Ownz-joo

hope this will help in some random way

#3 G-Ryder

G-Ryder

    Private First Class

  • Members
  • 38 posts

Posted 16 October 2003 - 04:20 PM

I can't remember exacly.. but you could try as adding them as Domain Controler or something along those lines.. I dont think that shows up on the login screen.

#4 boshcash

boshcash

    Staff Sergeant

  • Sergeant Major
  • 461 posts

Posted 20 October 2003 - 12:56 AM

search google, ago , i read a way to remove a created user from the windows xp logon screen , thats done by modifying the registry

#5 Guest_The Only JoVo_*

Guest_The Only JoVo_*
  • Guests

Posted 20 October 2003 - 09:26 AM

why not use the following command also :

net user "user" /EXPIRES:never

so u know that the user never expires.

#6 tibbar

tibbar

    First Sergeant

  • Members
  • 1,423 posts

Posted 21 October 2003 - 02:16 PM

well that doesn't answer the question. the problem is how to make a user that wont be visible to the end user at the xp login screen. it must be possible, and i cant imagine it's that hard to do.

e.g. if u install visual studio.net, u get an extra user called sqldebugger, which is only visible by typing net user in dos.

come on people, some one must know the answer to this...
If you want to read more about my security research, visit Tibbar.org

#7 Daxziz

Daxziz

    Private First Class

  • Members
  • 29 posts

Posted 21 October 2003 - 02:54 PM

Currently I only know one tweak for this function in general, and that's sadly not thru' cmd.exe - anyway here it goes:

Start RegEdit. Locate and go to: "HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\WINLOGON\SpecialAccounts\Userlist"

Here you'll have to create a new DWORD value, with *EXACT* the same name as the user you wish to hide.

This is however IMO not bad to know - running the correct applications will quickly do this for you.


-Daxziz

#8 tibbar

tibbar

    First Sergeant

  • Members
  • 1,423 posts

Posted 21 October 2003 - 05:37 PM

thanx, that's just what i was after. :rolleyes:
If you want to read more about my security research, visit Tibbar.org

#9 Wolfman

Wolfman

    Private First Class

  • Members
  • 60 posts

Posted 21 October 2003 - 07:49 PM

Infact, if you give the value "10000" to that DWORD, you can hide all users starting with that name:

ex:
Users-> hack_filler, hack_leech, hack_leechers

DWORD "hack_" VALUE "10000"

Cya
Wolfman

#10 ghost_c

ghost_c

    Private First Class

  • Members
  • 38 posts

Posted 21 October 2003 - 09:05 PM

thnks 4 the info i'll try it.... B)

#11 jetprice

jetprice

    Private First Class

  • Members
  • 89 posts

Posted 22 October 2003 - 05:31 AM

why not use the following command also :

net user "user" /EXPIRES:never

so u know that the user never expires.

... net user username /delete ...

#12 Guest_^Nio^_*

Guest_^Nio^_*
  • Guests

Posted 25 October 2003 - 04:46 AM

Currently I only know one tweak for this function in general, and that's sadly not thru' cmd.exe

Good thing there are applications that can edit the registry through cmd, or just cre8 a batch file that does that 4 u... :rolleyes:

Thnx 4 the info btw :)

#13 Daxziz

Daxziz

    Private First Class

  • Members
  • 29 posts

Posted 25 October 2003 - 03:54 PM

...code it yourself - WYSIWYG ;)


-Daxziz

#14 Guest_DJVASTVASTY2K_*

Guest_DJVASTVASTY2K_*
  • Guests

Posted 08 November 2003 - 01:08 AM

Good Topic Tibbar ;)

@ Daxziz, WolfMan

Thanks 4 The Info Guys
This Will Deffinetley Be UseFull ;)

OFF TOPIC:

Is It Possible To Get Higher Account With A Normal User Account Access Level And Guest ??

ie: have target host details user/pass
netbios says the user :joebloggs is a normal user.

Is it possible to get higher account access ie: create drive shares, set default shares ;)

Best Regards

Adam

Vast Gsm Team

Da Sick Crew

#15 Guest_UNDERTAKER_*

Guest_UNDERTAKER_*
  • Guests

Posted 08 November 2003 - 01:45 AM

can any one please upload an exmple batch file for that(invisible users)?

10x 4 all the helpers!





Also tagged with one or more of these keywords: windows