Re: hacking the logon

From: John E. Carty (jcarty@NOSPAMaustin.rr.com)
Date: 06/08/02


From: "John E. Carty" <jcarty@NOSPAMaustin.rr.com>
Date: Sat, 08 Jun 2002 15:44:29 GMT


Running 12 machines with XP Professional and none of them display this
behavior :-)

"jared" <dresarii@hotmail.com> wrote in message
news:c78401c20efe$f3504000$19ef2ecf@tkmsftngxa01...
> ok, i am refferring to the welcome screen or the logon
> prompt, depending on what you have it set to. everybody who
> has their XP account password protected is familiar with
> this dialogue. i should _not_ have to describe what the
> logon dialogue/welcome screen are, but i might as well
> because it seems i am the only one who knows what this is.
> we'll take it from step one.
> 1. you turn on your computer.
> 2. windows loads.
> 3. the welcome screen or the logon prompt dialogue appear.
> 4. you are asked for your username and password before you
> cant continue booting.
>
> on the logon prompt, if you leave both the username and
> password fields blank, it will log you on to an anonymous
> account with all access rights. try it for yourself, i dare
> you.
>
> and as i already said, i am running XP Pro.
>
> >-----Original Message-----
> >Both fields of what dialog? The unlock dialog of some
> >third-party screensaver you have loaded?
> >This is not how XP authentication dialogs behave for me.
> >Please clarify OS version: Home/Pro, and what dialog
> >with two fields.
> >
> >--
> >Roger Abell
> >MVP (Windows Platform) Associate Expert
> >The Expert Zone - www.microsoft.com/windowsxp/expertzone
> >
> >"jared" <dresarii@hotmail.com> wrote in message
> >news:c85101c20ec4$4b3b94d0$3aef2ecf@TKMSFTNGXA09...
> >> ok, heres what happens. i leave my computer alone for 15
> >> minutes while i run some errands. i locked the workstation
> >> (i am running xp pro and the admin account is password
> >> protected) so that to get on, they would have to know my
> >> password. so my friend calls me, and says, 'i just got
> >> onto your computer. im accessing all of your files as we
> >> speak'. so i ask 'what? how'd you know my pass?' he says
> >> he didnt, he said that if you leave both fields blank at
> >> the logon dialouge, you can get on an account with full
> >> acess rights. i was in disbeleif, so i had him show me
> >> when i got back. it worked. he got onto an account with
> >> all rights simply by leaving both fields blank. what is
> >> the problem? it doesnt make sense that windows could have
> >> such a huge security flaw. i paid all this money for
> >> something that can be hacked by simply leaving both
> >> fields blank? pffffft. this never happened with linux.
> >
> >
> >.
> >



Relevant Pages

  • Re: hacking the logon
    ... i am refferring to the welcome screen or the logon ... the welcome screen or the logon prompt dialogue appear. ... account with all access rights. ... >third-party screensaver you have loaded? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Window Logon Screen showing up ever since I installed HP printer
    ... > get no user logon screen!!!! ... > it did solve my screensaver issue (I no longer get the Windows Logon ... > solve this problem, put one in, to the administrator user account. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: hacking the logon
    ... i am refferring to the welcome screen or the logon ... the welcome screen or the logon prompt dialogue appear. ... > account with all access rights. ... >>third-party screensaver you have loaded? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: hacking the logon
    ... Since you have two boxes, I assume it is the login prompt, ... on the account, but I do have to enter a username. ... i am refferring to the welcome screen or the logon ... >>third-party screensaver you have loaded? ...
    (microsoft.public.windowsxp.security_admin)
  • [EC-SA-01.2003] Windows XP "welcome screen" exposes the names of all the members of the l
    ... logon screen with what is called "Welcome Screen". ... (including the original administrator account, ... Using the "welcome screen" actually disables / ignores the security ...
    (Bugtraq)