Tuesday, October 23, 2007

Administrator and User Passwords in Windows XP Continue.......


Not Prompted to Create Password with New XP User Account


When you create a new user on a Microsoft Windows XP Home
Edition-based computer, you are not prompted to create a password. To
create a password for a user account, click the icon for the account, and then
click "Create a Password".


Stored User Names and Passwords Feature Interoperability at a Command Prompt


By default, the Stored User Names and Passwords feature creates a
"key" for any connection that you make in the graphical user interface (GUI)
that requires alternate credentials. When you make a connection at a command
prompt by using the net use command and by passing alternate credentials, a key
is not created.


For the net use command to save the credentials in Credential
Manager, use the /savecred switch. When you use the /savecred switch, any
credentials that you are prompted for when you use the net use command are saved
as a key.


Therefore, if you are prompted for the user name and password (or
if you are prompted only for the password) when you use the net use command (but
not because you used an asterisk [*] in the net use command for password
prompting) and the /savecred switch, the credentials are saved.


When you type the net use * \\ computer_name \ share_name
/savecred command, the user is prompted for a user name, and then the user is
prompted for a password.

When you type the net use * \\ computer_name \
share_name /u: domain_name \ user_name /savecred command, the user is prompted
for a password.

However, when you type one of the following commands, a
key is not created:
net use * \\ computer_name \ share_name * /user:
domain_name \ user_name /savecred
-or-
net use * \\ computer_name \
share_name * /savecred /user: domain_name \ user_name

If you type net
help use at a command prompt, more information is displayed about the net use
command.


Password Has Expired Message


Start/Programs/Administrative Tools/Local Security Policy/Account
Policies/Password Policy. In the right pane, right click, properties,
modify (use accordingly). And Start/Programs/Administrative Tools/Computer
Management/Local Users and Groups/Right Click
"User"(intended)/Properties...Or with Admin privileges, at a command
prompt type: net accounts /maxpwage:unlimited.


To Create a Password Reset Disk


The Forgotten Password Wizard lets you create a password reset
disk that you can use to recover your user account and personalized computer
settings if you forget your password. The steps to perform this task
differ depending on whether your computer is a member of a network domain or is
part of a workgroup (or is a stand-alone computer).

My Computer is on
a Domain

Press CTRL+ALT+DELETE to open the Windows Security dialog
box. Click Change Password.
Click Backup to open the Forgotten
Password Wizard. Click Next and then follow the instructions as they appear on
the screen.

My Computer is not on a Domain

The steps to
perform this task differ depending on the type of user account you have. If you
have a computer administrator account: Open User Accounts in Control
Panel. Click your account name. Under Related Tasks located on the left side of
the window, click Prevent a forgotten password. In the Forgotten Password
Wizard, follow the instructions as they appear on the screen.

If you
Have a Limited Account

Open User Accounts in Control Panel. Under
Related Tasks located on the left side of the window, click Prevent a forgotten
password. In the Forgotten Password Wizard, follow the instructions as they
appear on the screen.

Notes: To open User Accounts, click
Start, point to Settings, click Control Panel, and then click User Accounts.


Certain Programs Do Not Work Correctly
If You Log On Through a Limited User Account.


After you log on to a computer by using a Limited
User Account, you may observe one or more of the following

behaviors when you try to use a program that is not
expressly designed for Windows XP. Information
here.


Password Reset Disk Overview

To protect user
accounts in the event that the user forgets the password, every local user
should make a password reset disk and keep it in a safe place. Then, if the user
forgets his or her password, the password can be reset using the password reset
disk and the user is able to access the local user account again.


Resetting the Password


After you reset the password of an account on a Windows XP-based
computer that is joined to a workgroup, you may lose access to the user's:
Web page credentials, File share credentials, EFS-encrypted files, Certificates
with private keys (SIGNED/ENCRYPTed e-mail).
More
information in detail here.


I assume no responsibility for the purpose
to which this information is used. This includes employees attempting to bypass
restrictions put into place by System Administrators on corporate
machines.


Delete Admin Password


Boot up with DOS and delete the sam.exe and sam.log files from
Winnt\system32\config in your hard drive. Now when you boot up in NT the
password on your built-in administrator account will be blank (No password).
This solution works only if your hard drive is FAT. [Editor's note: Use
with caution, there may be other ramifications from performing this tip.]


Forgot your Admin Password


This is a utility to (re)set the password of any user that has a
valid (local) account on your NT system, by modifying the crypted password in
the registrys SAM file. You do not need to know the old password to set a
new one.

It works offline, that is, you have to shutdown your computer
and boot off a floppydisk. The bootdisk includes stuff to access NTFS partitions
and scripts to glue the whole thing together. Note: It will now also work with
SYSKEY, including the option to turn it off!
More information here.
Download
here
.


All Passwords-Master Copy


With Darn! Passwords! Just one password opens the safe that holds
all those other ones for programs and web sites that require you to log
in.
Download
Here.


Just pick the password, and drag it and it's log-in (if there
is one) into the program that uses it. No retyping is necessary (even in
programs that do not accept the drag, you can just paste the password in). Go to
the URL of a password protected site with the click of a button.


Information on System Restore and Password Restoration


Passwords That Are Restored:

1.
Program passwords are restored, such as Hotmail Messenger, AOL Messenger, Yahoo
Messenger, and other Web server-based passwords. This behavior is by design: The
programs simply cache these passwords; the actual passwords are
stored on a
Web server. System Restore does not actually change the password, but it changes
the password that is remembered by the program. You can use the current password
for the program to log on to the server.

2. Domain and Computer passwords
are restored. This behavior is by Design and is a limitation of System Restore.
System Restore only rolls back the local machine state. Part of the information
about joining domains resides in Active Directory, and Active Directory is not
rolled back by System Restore.


Migration Wizard Does Not Migrate Passwords


The Migration Wizard does not migrate passwords. Passwords for
Dial-Up Networking connections, Microsoft Outlook Express accounts, Microsoft
Internet Explorer saved passwords, mapped drives, and so on will need to be
reconfigured once the migration is complete.


Administrator
Account Not Used for Logon


The administrator account and password created during Setup are
used to log on in Safe Mode only. To create a password for user accounts,
double-click Manage Users in Control Panel.


Therefore, if you are prompted for the user name and password (or
if you are prompted only for the password) when you use the net use command (but
not because you used an asterisk [*] in the net use command for password
prompting) and the /savecred switch, the credentials are saved.


When you type the net use * \\ computer_name \ share_name
/savecred command, the user is prompted for a user name, and then the user is
prompted for a password.

When you type the net use * \\ computer_name \
share_name /u: domain_name \ user_name /savecred command, the user is prompted
for a password.

However, when you type one of the following commands, a
key is not created:
net use * \\ computer_name \ share_name * /user:
domain_name \ user_name /savecred
-or-
net use * \\ computer_name \
share_name * /savecred /user: domain_name \ user_name

If you type net
help use at a command prompt, more information is displayed about the net use
command.


Logon Name
Not in Task Manager or Under Documents & Settings


When the Welcome screen is appears, the names that are displayed
do not match any of the names of users' folders under the Documents and Settings
folder or any of the names on the Users tab in Task Manager.

This
behavior may occur if you have changed the name of the account in the User
Accounts tool in Control Panel. By doing so, the new name appears on the Welcome
screen, but the actual account name remains the same. The folders under the
Documents and Settings folder and the names that are listed in Task Manager show
the actual account name.

To resolve this behavior, if the display name
for a user account has been changed, you can find out which account the new
display name belongs to by logging on as that user, starting Task Manager, and
then clicking the Users tab.

The user account that is marked as active is
the one that is currently logged on. Also, you can find out which of the folders
under Documents and Settings belongs to the currently logged-on user by
right-clicking Start, and then clicking Explore. Windows Explorer will then
start in the Start Menu folder of the currently logged-on user's
folder.






Administrator
Unable to Unlock a "Locked" Computer


This behavior can occur for either of the following
reasons: When the default screen saver is set to use a non-existent screen
saver program. And/or When you use a corrupted screen saver that is password
protected.
More
Information
.


Information
About Unlocking a Workstation


The following registry setting
is received every time the computer is locked:
Start/Run/Regedit

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon

ForceUnlockLogon
REG_DWORD

0 - Do
not force authentication inline (default)
1 - Require online authentication
to unlock

The preceding value controls whether a full logon is performed
during the unlock process. This can force a validation at the domain controller
for the user attempting the unlock process.

NOTE: If the value is not present, it functions as if it
had been set to 0 (zero).


Lock Your
Computer and Use Other Windows Logo Shortcut Keys


To use the shortcut, press the Windows logo key+L. The following
list has different computer lock-up scenarios that are available to you, as well
as other ways to lock the computer:
Click
Here
.


Create a Shortcut to Lock Computer


Right click a blank space on the desktop, select new, shortcut.
Copy and Paste this line: "rundll32.exe user32.dll,LockWorkStation" in the
program location box. Click next and create a name for your shortcut, click
finish.


Lock the Taskbar


This restriction is used to force the locking of the taskbar and restrict
users from making any changes to its position. Start/Run/Regedit: Navigate
to this key and create a new DWORD value, or modify the existing value, called
'LockTaskbar' and edit the value according to the settings below. Exit
your registry, you may need to restart or log out of Windows for the change to
take effect.


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value
Name: LockTaskbar
Data Type: REG_DWORD (DWORD Value)
Value
Data: (0 = Unlocked, 1 = Locked)

No comments: