Re: Cancel button works when logging in without password

From: Super_Geek (RichardFalconer_at_thepostmaster.net)
Date: 07/14/03 

Date: Mon, 14 Jul 2003 10:02:44 +0100

Mark asks a question to do with PCs, Super_Geek dives in and tries to
help:
>When I boot up my system I can hit the cancel button and
>get into all programs. I have children who do this
>without my password and get into everything without a
>password, how can I fix this?

In addition to what others have said in this thread,

Mark,
This is not a bug that needs fixing. The win9x logon prompt was designed
to keep users' information and settings apart, not to deny access to the
computer from anonymous users.

There are a number of work-arounds you can use though, depending on what
you want to accomplish.
If you do not want your children to access the computer under any
circumstances, (as you suggest,) then putting a BIOS password on the PC
is the most effective and easiest solution.
When your PC first turns on and is booting up, press DEl (or maybe F2,
it depends,) and a blue and yellow screen pops up. Go to "Set user
password" (the exact wording depends on the bios,) and type a password.
Save and exit. When you next restart, you'll be prompted for that
password.

If you want your children to access the PC under their own accounts,
there is a little known feature in win9x to give the dialogue box
'proper' security. Under Network Neighbourhood, (NB: You must have a
network adapter for this to work, or Network Neighbourhood won't be on
the desktop,) click "Add", "Protocol" then "Microsoft". There will be a
list of protocols in the right pane. Select Microsoft Family Logon and
press ok. I think that should do the trick. You may be prompted for your
Win98 CD btw.

Or you can cancel the prompt all together:
http://security-tips.com/cancel-logon-1.htm

Otherwise, here are some general tips:

WIN 9X PASSWORDS
==================
http://securityadmin.info/faq.htm#encryption
http://securityadmin.info/faq.htm#password9x
http://securityadmin.info/faq.htm#harden

Or simply:
1) Create a screensaver with a password setting
2) Navigate to the appropriate .scr file in the C:\windows\ folder
3) Create a shortcut to it
4) Paste the shortcut into the StartUp folder.
This will force a screen saver to load up on startup, and the password
must be entered to use the system.
BE WARNED: This is VERY easily by-passed using to methods. I won't
describe them because I presume quite a few (or some at least) will have
taken this simple solution before. However, for a more advanced solution
you can call the screensaver from the registry, and then it can only be
by-passed using one of the two methods.

HTH!
Feel free to mail me /post to group with any questions on info listed
here. 

-- 
Super_Geek, 16
"How do I set a laser printer to stun?"
-My website is currently under construction, but I'll post a link here soon forFAQs.