Re: hacking the logon

From: jared (dresarii@hotmail.com)
Date: 06/08/02 

From: "jared" <dresarii@hotmail.com>
Date: Sat, 8 Jun 2002 08:12:48 -0700

ok, i am refferring to the welcome screen or the logon
prompt, depending on what you have it set to. everybody who
has their XP account password protected is familiar with
this dialogue. i should _not_ have to describe what the
logon dialogue/welcome screen are, but i might as well
because it seems i am the only one who knows what this is.
we'll take it from step one.
1. you turn on your computer.
2. windows loads.
3. the welcome screen or the logon prompt dialogue appear.
4. you are asked for your username and password before you
cant continue booting.

on the logon prompt, if you leave both the username and
password fields blank, it will log you on to an anonymous
account with all access rights. try it for yourself, i dare
you.

and as i already said, i am running XP Pro.

>-----Original Message-----
>Both fields of what dialog? The unlock dialog of some
>third-party screensaver you have loaded?
>This is not how XP authentication dialogs behave for me.
>Please clarify OS version: Home/Pro, and what dialog
>with two fields.
>
>--
>Roger Abell
>MVP (Windows Platform) Associate Expert
>The Expert Zone - www.microsoft.com/windowsxp/expertzone
>
>"jared" <dresarii@hotmail.com> wrote in message
>news:c85101c20ec4$4b3b94d0$3aef2ecf@TKMSFTNGXA09...
>> ok, heres what happens. i leave my computer alone for 15
>> minutes while i run some errands. i locked the workstation
>> (i am running xp pro and the admin account is password
>> protected) so that to get on, they would have to know my
>> password. so my friend calls me, and says, 'i just got
>> onto your computer. im accessing all of your files as we
>> speak'. so i ask 'what? how'd you know my pass?' he says
>> he didnt, he said that if you leave both fields blank at
>> the logon dialouge, you can get on an account with full
>> acess rights. i was in disbeleif, so i had him show me
>> when i got back. it worked. he got onto an account with
>> all rights simply by leaving both fields blank. what is
>> the problem? it doesnt make sense that windows could have
>> such a huge security flaw. i paid all this money for
>> something that can be hacked by simply leaving both
>> fields blank? pffffft. this never happened with linux.
>
>
>.
>

Relevant Pages

  • Re: hacking the logon
    ... After logging in with this account that has no name, ... USERNAME and USERPROFILE ... and password fields blank at the login prompt accessible ... >>>third-party screensaver you have loaded? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Window Logon Screen showing up ever since I installed HP printer
    ... > get no user logon screen!!!! ... > it did solve my screensaver issue (I no longer get the Windows Logon ... > solve this problem, put one in, to the administrator user account. ...
    (microsoft.public.windowsxp.security_admin)
  • Can only logon as Admin Users passwords invalid
    ... I have Win XP Pro running with the Default Admin account ... password" prompt appeared. ... was off I attempted to logon as any other user and got the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: hacking the logon
    ... i am refferring to the welcome screen or the logon ... the welcome screen or the logon prompt dialogue appear. ... > account with all access rights. ... >>third-party screensaver you have loaded? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Intranet Authentication Question
    ... The logon is: IISServerName\username. ... > should not prompt at all, ... I have checked the user account. ... > Automatic Logon in Intrant Zone. ...
    (microsoft.public.inetserver.iis)