how to secure SAM file from accessing and resetting administrator password form dos
hi all ,
my problem is i have multi user have dell computers which not support to disable cd rom or usb booting and not support to use password on boot menu
the problem is users every time i install new windows for them is using some cd and from it to reset administrator password and dis join themself from domain although my windows7 is updated
is there is any way to secure SAM file from this hack method
i trying to freeze my pc with some software like deepfreeze 7.20 but unfornately it freeze every thing except the SAM file i do not know why
please help me in this problem because it make alot of Trouble to me
February 13th, 2012 3:23am
follow this link to force password to all administrator and make it very complex i did it in my company
http://mabdelhamid.wordpress.com/2011/09/12/how-to-change-local-administrator-password-with-group-policy/
Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
February 13th, 2012 3:43am
dear sir
thanks for your quick reply
i am doing the script which i found in your plog because iam using active directory 2003
and it is helpful to me
but the problem now is the users starting to use another boot cd which allow them to add new user in sam file and grant it administration permision
is there is way to add in this wonderful script command which delete any user except administrator when it run in startup
February 14th, 2012 3:00am
You can make restricted group to prevent add any user to local administrator group except you need add them
this nice article to guide you
http://www.windowsecurity.com/articles/using-restricted-groups.htmlMohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
February 14th, 2012 5:26am
Hi,
I suggest you try the deny logon locally policy for all of these clients.
Hope that helps.
February 16th, 2012 8:05pm
daer ivan liu
i can't deny logon locally for administrator account
Free Windows Admin Tool Kit Click here and download it now
February 22nd, 2012 4:45am
hi all
as i say before the script which m abd hamid told me about is running well but the problem now is i put it to run in stratup it run but it take around 7 second to be run
so if some body trying to enter in the beginig of welcome screen he will be enter if he made password reset
my question is there is any way to make delay 20 second in welcome screen to give time to script to be run before user be able to login
February 22nd, 2012 5:51am
What kinda of script are you running? vbscript?
Free Windows Admin Tool Kit Click here and download it now
February 22nd, 2012 10:10am
vbe script
February 23rd, 2012 2:13am
any solution please to make welcome screen do not appear until the script runnig
Free Windows Admin Tool Kit Click here and download it now
February 26th, 2012 4:44am
really i wanna to ask why microsoft technical didn't answer my question till now
and how till now there is some way to attack sam file of windows 7 with old program like hirens 9
March 19th, 2012 4:31am