how to secure SAM file from accessing and resetting administrator password form dos
hi all , my problem is i have multi user have dell computers which not support to disable cd rom or usb booting and not support to use password on boot menu the problem is users every time i install new windows for them is using some cd and from it to reset administrator password and dis join themself from domain although my windows7 is updated is there is any way to secure SAM file from this hack method i trying to freeze my pc with some software like deepfreeze 7.20 but unfornately it freeze every thing except the SAM file i do not know why please help me in this problem because it make alot of Trouble to me
February 13th, 2012 3:23am

follow this link to force password to all administrator and make it very complex i did it in my company http://mabdelhamid.wordpress.com/2011/09/12/how-to-change-local-administrator-password-with-group-policy/ Mohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
February 13th, 2012 3:43am

dear sir thanks for your quick reply i am doing the script which i found in your plog because iam using active directory 2003 and it is helpful to me but the problem now is the users starting to use another boot cd which allow them to add new user in sam file and grant it administration permision is there is way to add in this wonderful script command which delete any user except administrator when it run in startup
February 14th, 2012 3:00am

You can make restricted group to prevent add any user to local administrator group except you need add them this nice article to guide you http://www.windowsecurity.com/articles/using-restricted-groups.htmlMohamed Abd Elhamid Abd Elaziz Microsoft System Administrator My blog: http://Mabdelhamid.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
February 14th, 2012 5:26am

Hi, I suggest you try the deny logon locally policy for all of these clients. Hope that helps.
February 16th, 2012 8:05pm

daer ivan liu i can't deny logon locally for administrator account
Free Windows Admin Tool Kit Click here and download it now
February 22nd, 2012 4:45am

hi all as i say before the script which m abd hamid told me about is running well but the problem now is i put it to run in stratup it run but it take around 7 second to be run so if some body trying to enter in the beginig of welcome screen he will be enter if he made password reset my question is there is any way to make delay 20 second in welcome screen to give time to script to be run before user be able to login
February 22nd, 2012 5:51am

What kinda of script are you running? vbscript?
Free Windows Admin Tool Kit Click here and download it now
February 22nd, 2012 10:10am

vbe script
February 23rd, 2012 2:13am

any solution please to make welcome screen do not appear until the script runnig
Free Windows Admin Tool Kit Click here and download it now
February 26th, 2012 4:44am

really i wanna to ask why microsoft technical didn't answer my question till now and how till now there is some way to attack sam file of windows 7 with old program like hirens 9
March 19th, 2012 4:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics