Re: Diabling Default User Windows 98

From: David Dickinson [MVP] (eis@no-spam.softhome.net)
Date: 06/18/02 

From: "David Dickinson [MVP]" <eis@no-spam.softhome.net>
Date: Tue, 18 Jun 2002 04:05:39 -0600

John wrote:
> Hi,
> I am trying to set up my Win 98 PC such that only
> authorised users can gain access to the PC. Thus I need to
> disable the default user. (ie disable the cancel option
> during the login procedure) Is there a simple procedure to
> do this?

Windows 98 does not provide user-level security. However, if you have
Client for Microsoft Networks installed, you can try to force users to log
on to the workgroup (even if it is a standalone computer):

REGEDIT4

[HKEY_LOCAL_MACHINE\Network\Logon]
"MustBeValidated"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NoLogon"="RUNDLL32 shell32,SHExitWindowsEx 0"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"NoLogon"="RUNDLL32 shell32,SHExitWindowsEx 0"

However, if this doesn't work, you may have to boot into Safe Mode and
change the MustBeValidated value to 0. Also, the NoLogon value must be set
in the registry key for each user. If there is only one user ID, then the
HKEY_CURRENT_USER setting is sufficient.

Note that this is not secure and is not hard to break.

I haven't personally tried this method (I keep scrapping my Windows 98 test
machine just before I need it again).

Alternatively, set a boot password in the BIOS and a screensaver password.
This method may be more effective and safer than the method given above, but
it still is not foolproof. If you want better logon security, get Windows
XP /and/ set a boot password in BIOS. 

--
David Dickinson, MVP (Security)
EveningStar Information Services
Las Cruces, NM USA
Summary of Microsoft Security Bulletins
http://www.zianet.com/bwd/securitybulletins.asp