Windows Xp user type

is there an actual file somewhere that controls what type of user somebody is on windows xp. What i mean is if you are administrator and you log in, you go to the control panel and can change the user type of differant users. When you do this is there a file somewhere, that is only accessible to administrators that changes. I ask because i have been reduced to a non admin account on my windows xp box at home. The plan is to place a program in the startup folder of my dads account so that when he logs on it will run and make me back into an admin. Any help you guys(gurls) can give me will be greatly appreciated. Thanks a lot.

Sounds like some l33t SocialEngineering mr. new_b_l33t..

Just ask your dad to give you back admin rights..
If your dad doesn't want you to be an admin.. all the more power to him..

I wouldn't let my newby 1337 son/doughter play as admin either . . .

Your Father has reduced you to non-administrative rights because he believes you could better spend the time learning to read.....

How do I know this?

1. I am _very_ smart!
2. I am at least as old as your father, possibly older..... Therefore extremely wise like he is!
3. You clearly failed to comprehend the first page you were presented with when you visited this site.

Had you read that page and understood it you would have found that slinking into AO asking us how to circumvent your, (obviously smarter than you), father's rules is frowned upon here. I bet he would have read and understood the first page..... It's a mark of wisdom, maturity and good sense.

You have physical access to the box...... Learn how the damned thing works!!!!!!!!!! :rolleyes:

Thanks for the help GUYS!!!!

Go to your father.
Sit down with him.
Bring him a beer and a cigar.
Talk with him about the mysteries of life.
Ask him about growing up at the beginning of the technological revolution.
Ask Dad for admin rights.
When he says no, bring him another beer and another cigar.

lol [bold]11001001[/bold] nice post, guessing from the lack of any really technical answer that windows xp user permissions are a bit more complicated than changing a single file. Whatever thanks for reading the thread guys!(gurls too)

new: 11001001's answer was actually incomplete. The final instruction is "Repeat until done"....

Yes, you are correct. Windows NT/XP security is a lot more complicated than altering a single file... and the real problem comes when you try to access any file concerned with the security of the computer. Even your dad can't get to some of them under normal circumstances because the system itself locks out all access except it's own. However, as with most things security related, there are ways around that... Ways that I don't condone..... Your dad has his reasons for removing your admin rights and no matter how petty and stupid you think the reasons may be they are his reasons and he has every right, as the owner of the computer, to enforce them.

You would be astounded at how many of my friends, (the ones silly enough to allow their children to reach puberty when they know all things and us old fuddy duddy's are just senile old farts), computers are royally messed up by the surfing, chatting etc. habits of their pubescent offspring. At a minimum it costs them a good meal to get their computer back to a usable state.... Sometimes more.... :D

Now, as I said in my first post. You have physical access to the box. Learn about what that means. Then when you know that you will need to know what it is that you need to know about the box and it's files to get the most important one. From there you can work out how to get it. Once you have it you should be able to work out what you need to do with it. Once you have done that you own your daddy's shiney new computer. From there you need to work out how to prevent daddy from finding out that you own his computer not him. When you have done all that you'll almost be ready for employment in my world...... ;) If you fail you'll still be grounded when they bury you!!!!!!

The answers are out there.... Find them..... By the time you know the answers the task will seem silly, because there will be so many more questions that interest you and your dad will have no choice but to buy you your own computer....... :cool:

Dad said "no" there are reasons for that.....
i had a dad who said no.... and well i was grounded more times then i wasnt when i was at home


And when you jack it up soooo bad and relize that you deleted all of dads tax files, and he gets audited then well simply put your screwed......

however since im feeling nice im going to give you a link, but only on the condition that when you do jack up your "Dads" (not yours in any way shape or form)computer and your dad beats you to a bloody pulp that you post pictures so we can laugh @ you :-D
lol

Click only if you want Dad mad

i already how to understand how to get the sam file with knoppix, then run sam inside and l0pht crack, (i gave a presentation on it to my speech class on how to make more secure passwords that can't be dictionary cracked). Are user types contained in the SAM file?

Why do you want admin rights? Answer me that without saying "So I can install Kazza," "So I can use Regedit to 'Fix' the computer," or "Just cause" and I will help you get admin rights.

If I had a public box (a.k.a their was someone aside from me working on the same box) I would also make sure that that person had no admin rights. Just be fair with the situation. If obiously have other family members using that same computer, so do you think they should all have admin rights as well?

My final point, the reason that all the people here are being "asses" about their responses is that they have to set up BIG networks that consist of more than a single computer. When after all of their hard work of setting them all up, connecting them, and setting up user rights, some punk kid downloads a trojen that infects all of the computers on the network...They might get somewhat pissed.

I know that you are just going to completely ignore all of this that I just said, so the only two ways to get admin rights (without the possibility of effing up your box) is to

A.) Crack the sam file
B.) Change your level when your dad is still logged on

Sorry for the ramble, I just wanted to talk and I decided to just screw order.

Okay i would like to clarify a few things here:

I am the owner of the box, my dad locked me out because he said that i spend too much time on there doing "idle minded things". What he doesn't understand is that i am trying to learn programming languages (python is the current one) and every single thing that i can about how that machine works. I plan on going into the IT profession and i view my working on my home computer/network as practice. I have already cracked the SAM file, a long time ago, i know my dads password, he doesn't know i know but i do. I guess i'm not really looking to become admin, i'm looking for something challenging. Why do i want to be admin lansing? Because i am a really nice brother and let my sisters use my computer, they tend to mess things up and i'm usually the one to fix them. If you are not admin it makes it way more difficult than it should be. If you people don't want to help my i'm totally fine with that, but please don't post derogitory things about me, i'm not just some dumb ass who wants to install kazaa so that he can download the new chingy cd, or look at some porn, i actually want to learn what all it takes for kazaa or any other aspect of my computer to work.

So in other words, this whole thread was totally pointless. You first asked how to get admin status, yet you already knew how to get admin status. So wtf is the point of this thread??? Or did I not understand something? Now, I'm not going to neg you, but you should be for this pointless thread, it's a waste of space.

then do lots more reading and figure out how to do it yourself. This still sounds like a great piece of SE to me. One of the first things you should learn is you don't want your daily use account to have admin rights if you want to keep it secure so mabey your dad is doing you a favor in more than one way.

Not exactly duck... your uber and he's l33t and thats whats important here... not computers. :)

lol specialist!! haha!

Anyway, I guess I wanna slightly apologize for that outbreak I had earlier, I now fully understand the question. My question is, why do you want another admin account if you already have access to your dad's? Is it that important?

Quote:

---

Originally posted here by The Duck
So in other words, this whole thread was totally pointless. You first asked how to get admin status, yet you already knew how to get admin status. So wtf is the point of this thread??? Or did I not understand something? Now, I'm not going to neg you, but you should be for this pointless thread, it's a waste of space.

---

Uhmmmmmmmmmmm, I believe I read this quote by thehorse13 when I first came to AO "just another turd in the AO toilet bowl that the moderators need to flush" maybe TH13 could confirm that one!!!!!! ;)

Well first if that is all you wanted to know, then you more than likely shouldn't have led everyone here on that you wanted to be a skiddie:

Quote:

---

The plan is to place a program in the startup folder of my dads account so that when he logs on it will run and make me back into an admin. Any help you guys(gurls) can give me will be greatly appreciated. Thanks a lot

---

If all you wanted to know is what file the passwords are located in, then you already found the answer to that. It is indeed the SAM file. If you want to play around with it some more go below and play with all the neat little tools.

Just remember, if you want people to treat your question with respect, then ask it with respect. Another example of how to phrase your original question would be something like this:

Quote:

---

Hey guys, where are the user passwords for Windows XP stored and how are they encrypted? I'm curious as to how well they are guarded. I have heard of techniques like using john the ripper on the SAM file, but is there a way I can do this without using other peoples tools. Thanks for the help.

---

Regardless if you are cracking someone else's box or not, if you phrase your original question like you are seeking information instead of access, you will get a better response that won't be filled with attack replies.

I personally don't know any other method aside from using a password cracker on the SAM file, but tries these out below if you want.
http://www.petri.co.il/forgot_admini...r_password.htm

Let me see if i can FULLY clarify myself here:


This Box belongs to me. I already have the capability to get admin access, i have this because long ago i cracked the SAM file. I am looking for another way to get admin access as an educational challenge to myself, i don't need it but feel that it would be an educational to learn other ways to get it. Yes my original question was worded horribly for this i apologize.

i think thats it.

Much better wording! Other then cracking the SAM file, I really don't know of another sure way to get admin. But at least now everyone has a better idea of what your asking, at least I do lol.

depending on the patch status on the machines there's a few ways to get admin which are easy enough to find out so i wont go against consensus. so you want to put a file in you dads start-up folder.

write a perl script that shells out using system() and use the net command to have him add you to the administrator group. compile the script with perl2exe using the -gui option to run without a console and have it delete itself when its done...now all its going to take is admin rights to put the file in his start up folder.

a little hint...some chm type help files run with system privilages

Couldn't you just do this with an ordinary batch file?

Could i do it with a batch file? i haven't really worked very much with them before any good tutorials out there you could point me to?

todob1:
Are you talking about the help file that allowed a cracker to put malicous code on a website and delete files off of your computer? They demonstrated that on The screen savers (which now SUCKS) a while ago i think. If thats not what you are talking about could you please elaborate a little bit. Thanks a lot though for actually trying to answer my question i sincerely appreciate it.

A batch file is just a series of dos commands. When you run the file, it acts just as if you typed the contents of the file into a dos prompt. You can use any text editor to make them and then name the file xxx.bat.

In a third (scandalous) way of accomplishing the same thing, you could write a program to emulate the windows login screen to capture the admin password. Once it gets the password it would have to crash the computer or give a phony error message saying to restart the computer. Otherwise the admin would realize that it is not his account that he just "logged" into.

Is it possible to create a file that emulates commands from the user. I.E. start, control panel, users, etc. i could put it in the startup folder so that it runs then executes the commands at a time when i know for sure nobody is around (3:00 am on a monday night for instance.). With the batch file approach are you saying that i could gain admin access using it, or that i could use a batch file to execute whatever commands i wanted to execute as admin on the system. Another idea i just though of would be to install a rootkit, and get him to just switch users instead of signing off so that it keeps running? I'm just kindof shooting ideas around so if some of this sounds unsensical i apologize.

I think you can make admin accounts from the Command prompt, but you have to have admin access. So what you would do is make a batch file that runs the necessary commands and put it in the startup folder on the admin account. I could be wrong about all this, but I actually think it might work.

I don't get why you would say that your looking for a challenge then go on to talk about rootkits & stuff. The whole idea behind trojans in general is that it pretty much does the job for you... only rootkits take it even yet another step further by replaceing files, hideing the existance of files, geting rid of logs, and do various keyloging and sniffing routines.

sorry specialist, about 5 seconds after i posted that i realized how incredibly uncool and unchallenging it would be to use a rootkit or trojan. The duck, AWESOME!! if you can make user accounts from the command prompt that is sweet and pretty much a solution, thanks a LOT!

Well, like I have stated before, I am not entirely 100 percent certain, but it could work. Just do some research on batch files and different commands used in the command prompt.

The net user command allows the management of users from the command line.... However, you can't create a user with greater rights then the current context you are in nor can you assign users to groups that have greater rights than your current context.

So unless you find a way around that piece of security you are just going to make a bunch of useless accounts which he will notice piling up in his management console..... ;)

If the windows is installed on an ntfs partition, your dads (admin) account is propably not writeable (if even accessable) from your account.

so to place that script you would, just like with the sam file need to do it with an ntfs capable boot disk

If its your box then why does your dad have admin rights. And if you the owner of the box why don't you back up all your stuff and reinstall windows. That would take about an hour max. Or if you want te be really leet get yourself a copy of norton ghost and make a ghost of a fresh windows install with all you programs yust the way you like it.

Tiger shark, he has the password to his fathers admin account, so all he would need to do is make the batch file with the right commands and place it in the startup folder, that way, since the account is an admin account, it would make another admin account. Thats the plan, do you think that would work?

OR

Why don't you just log onto your dad's account and just make another admin account for you ther normal way??

i could be wrong but couldnt he go into bios and make hisself the admin and if thats where his dad went he should be able to figure out the password with some ease who know's it could be his name lol but hey i am only n00b so l83r...

The duck, as i already stated i am doing this as an educational challenge to myself. Logging onto my dad's account would != challenge.

Maybe I missed it, but I didn't see the post that answered his question. I have the same one. I don't care how to crack the file anyways, but I'd like to know which file those settings are saved in. It has to be a DLL, SAM, or stupidly a random registry entry. SAM is part of the registry though, and I do believe that it is in there. Please make this pathetic thread useful and answer the question. Besides, if it weren't for kids like him, you'd all be outta jobs.

So i'm gonna go ahead and assume that nobody knows that answer then?