RE: Win 2k logon bypass
From: Peter Yang [MSFT] (petery@online.microsoft.com)
Date: 03/12/03
- Next message: Peter Yang [MSFT]: "Re: Share Directory Help!!!"
- Previous message: Ibrahim El-Zawawy: "adminsdholder"
- In reply to: Jeff Doty: "RE: Win 2k logon bypass"
- Next in thread: Ryan Lambert: "Win 2k logon bypass"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: petery@online.microsoft.com (Peter Yang [MSFT]) Date: Wed, 12 Mar 2003 11:36:23 GMT
Hi Jeff,
Before we go further, I would like to confirm the following information
with you:
1. Does the issue occurs only on only one machine?
2. Does the user use a local or a domain user to login?
3. If he uses a different user to log on when you see "password is
incorrect", what is the result.
I suggest that you check the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\GinaDLL
Please remove it if it exists. You can refer to the following article for
more related informatoin.
302346.KB.EN-US The Default Windows Logon Interface May Not Appear After
Installing
http://support.microsoft.com/default.aspx?scid=KB;EN-US;302346
If you have any questions, please feel free to post back.
Thanks & Regards,
Peter Yang
Microsoft Online Support Engineer
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Content-Class: urn:content-classes:message
| From: "Jeff Doty" <jeff.doty@state.nm.us>
| Sender: "Jeff Doty" <jeff.doty@state.nm.us>
| References: <06e901c2dea8$d15d9b80$2f01280a@phx.gbl>
<q5lmnTx3CHA.2312@cpmsftngxa08.phx.gbl>
<05ec01c2e1c7$d27dda80$3301280a@phx.gbl>
<8ZJiA2e4CHA.1532@cpmsftngxa08.phx.gbl>
<07a901c2e369$f5fff9e0$a001280a@phx.gbl> <SW1w4164CHA.2496@cpmsftngxa06>
| Subject: RE: Win 2k logon bypass
| Date: Tue, 11 Mar 2003 07:07:40 -0800
| Lines: 169
| Message-ID: <02a801c2e7df$f5daddc0$3401280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: quoted-printable
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcLn3/Xaj9673NYETiuurGvOIiukDQ==
| Newsgroups: microsoft.public.win2000.security
| NNTP-Posting-Host: TK2MSFTNGXA04 10.40.1.52
| Path: cpmsftngxa06!cpmsftngxa08.phx.gbl
| Xref: cpmsftngxa06 microsoft.public.win2000.security:7092
| X-Tomcat-NG: microsoft.public.win2000.security
|
| The user does press Ctrl+Alt+Del to get the logon dialog.
| The user then enters their username and then enters their
| password. Then they click OK and recieve an error that
| the password is incorrect. Then they go back to the logon
| dialog box with their username still in it and instead of
| putting their password in they hit the enter key a couple
| of times and they are allowed into windows. We do not
| allow blank passwords so this is disturbing.
| Jeff
| >-----Original Message-----
| >Hi Jeff,
| >
| >Usually, when we log on the Windows 2000 computer, we
| will first press
| >Ctrl+Alt+Del and enter the user name and password to log.
| >
| >I am confused how do you repeatedly press the Enter to
| log on?
| >
| >Please let me know the detail steps you tried to log on.
| >
| >Best Regards,
| >
| >Jeff Qiu
| >jefffqiu@online.microsoft.com
| >Online Support Professional
| >Microsoft Corporation
| >
| >This posting is provided Ħ°AS ISĦħ with no warranties,
| and confers no
| >rights.
| >
| >--------------------
| >>Content-Class: urn:content-classes:message
| >>From: "Jeff Doty" <jeff.doty@state.nm.us>
| >>Sender: "Jeff Doty" <jeff.doty@state.nm.us>
| >>microsoft.public.win2000.security
| >>
| >>Hi Jeff,
| >>The system is a Windows 2000 Pro, logging into a Windows
| >>2000 AD domain.
| >>Jeff D.
| >>>-----Original Message-----
| >>>Hi Jeff,
| >>>
| >>>Based on your description, this should not be a Windows
| >>2000 system. Do
| >>>you mean a log on to the domain on a Windows 98/Me
| system?
| >>>
| >>>Please confirm the Operating system first.
| >>>
| >>>You may type winver from Start > Run... to find out the
| >>version of the
| >>>system.
| >>>
| >>>Regards,
| >>>
| >>>Jeff Qiu
| >>>jefffqiu@online.microsoft.com
| >>>Online Support Professional
| >>>Microsoft Corporation
| >>>
| >>>This posting is provided Ħ°AS ISĦħ with no warranties,
| >>and confers no
| >>>rights.
| >>>
| >>>--------------------
| >>>>Content-Class: urn:content-classes:message
| >>>>From: "Jeff Doty" <jeff.doty@state.nm.us>
| >>>>Sender: "Jeff Doty" <jeff.doty@state.nm.us>
| >>>>References: <06e901c2dea8$d15d9b80$2f01280a@phx.gbl>
| >>><q5lmnTx3CHA.2312@cpmsftngxa08.phx.gbl>
| >>>>Subject: RE: Win 2k logon bypass
| >>>>Date: Mon, 3 Mar 2003 12:59:46 -0800
| >>>>microsoft.public.win2000.security
| >>>>
| >>>>Hi Jeff,
| >>>>Yes, they press the "Enter" key several times and it
| >>>>bypasses the logon and lets them into the system. The
| >>>>error message that comes us is the standard, You have
| >>>>messed up your password error message. Which they
| click
| >>>>ok on and press the "Enter" key several more times.
| >>>>Yes, it is Windows 2000 Logon.
| >>>>Jeff :-)
| >>>>>-----Original Message-----
| >>>>>Hi Jeff,
| >>>>>
| >>>>>I am afraid I am not very clear about the return here
| >>you
| >>>>mentioned here.
| >>>>>
| >>>>>Do you mean you have then to repeatedly press the
| Enter
| >>>>key will cause the
| >>>>>system to log on correctly?
| >>>>>
| >>>>>Do you refer to the log on in Windows 2000?
| >>>>>
| >>>>>Do you get any error message when you failed to log
| in?
| >>>>>
| >>>>>Best Regards,
| >>>>>
| >>>>>Jeff Qiu
| >>>>>jefffqiu@online.microsoft.com
| >>>>>Online Support Professional
| >>>>>Microsoft Corporation
| >>>>>
| >>>>>This posting is provided Ħ°AS ISĦħ with no
| warranties,
| >>>>and confers no
| >>>>>rights.
| >>>>>
| >>>>>--------------------
| >>>>>>Content-Class: urn:content-classes:message
| >>>>>>From: "Jeff Doty" <jeff.doty@state.nm.us>
| >>>>>>Sender: "Jeff Doty" <jeff.doty@state.nm.us>
| >>>>>>Subject: Win 2k logon bypass
| >>>>>>Date: Thu, 27 Feb 2003 13:40:16 -0800
| >>>>>>microsoft.public.win2000.security
| >>>>>>
| >>>>>>Hi,
| >>>>>>
| >>>>>>I have a strange thing that is happening. I have
| some
| >>>>>>systems that the user trys to logon to and the logon
| >>>>>>attempt fails and they hit return a couple of times
| >>and
| >>>>>>they still get into the system. A couple of things
| >>may
| >>>>be
| >>>>>>causing this, the power in the building is not very
| >>good
| >>>>>>quality and this occurs in the mornings when the
| user
| >>>>>>tries to logon, the machine has been running through
| >>the
| >>>>>>night. If I have them reboot the systems then
| Windows
| >>>>>>behaves normally. Has anyone else seen this. Do
| you
| >>>>have
| >>>>>>any suggestions about resolving the appearant
| security
| >>>>>>breach. We leave the systems running through the
| >>night
| >>>>to
| >>>>>>run Anti Virus scans and allow for updates to
| uploaded
| >>>>to
| >>>>>>the systems. Thanks in Advance.
| >>>>>>
| >>>>>>Jeff :-)
| >>>>>>
| >>>>>
| >>>>>.
| >>>>>
| >>>>
| >>>
| >>>.
| >>>
| >>
| >
| >.
| >
|
- Next message: Peter Yang [MSFT]: "Re: Share Directory Help!!!"
- Previous message: Ibrahim El-Zawawy: "adminsdholder"
- In reply to: Jeff Doty: "RE: Win 2k logon bypass"
- Next in thread: Ryan Lambert: "Win 2k logon bypass"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|