Bypass domain logon

**ap0stle** · April 1st, 2004, 11:10 AM

I work in IT for a local school. The people who supplied the computers (win98SE) have setup a 'lock down' so that pupils can't logon to local machine.
One of their PCs needs a new motherboard and in order to change it and set up drivers for the new NIC I need to logon to the local machine, then when I've loaded all the motherboard resources and other drivers, I'll set it back to logon to domain with the same 'lock down'. Lock down = disabling esc function at Domain logon window.

Does anyone know how I change the settings in DOS to enable local logon? The PC supplier say it is not possible but I think it is.
Cheers

**NooNoo** · April 1st, 2004, 11:23 AM

ap0stle, Welcome to Windrivers.

I find it hard to believe that an authorised person would not be able to logon locally. Who is the pc supplier and why do they assure you it is not possible?

**Ya_know** · April 1st, 2004, 12:03 PM

Sounds like you got poledit running. Login to the network, with a floppy disk having poledit.exe and an adequate admin.adm file and you can open the policy, and uncheck the login option that requires Network authentication...I think you can also do something like this in safe mode, in fact, I bet you can manually edit the registry to remove this requirement in normal mode...I will poke around.

If you've never used poledit you may need to poke around a bit...But it's easy once you find what you are looking for.

**Ya_know** · April 1st, 2004, 12:17 PM

Ok, the registry key that Poledit sets up is at HKLM/network/login the string name is MustBeValidated , should have a value of 1. Either set that to zero, or just delete the string. If you go into safe mode you can get on locally and edit this string, so that when you go back in under normal mode you can function locally, and without a network connection.

This is all presuming that this is poledit we are facing, and not some 3rd party solution…

**Gollo** · April 1st, 2004, 03:19 PM

Gotta agree with Noo here. Sounds fishy.

You should just reinstall windows and then apply the policy again seeing how it's new hardware. Then you wouldn't have this problem

**Ya_know** · April 1st, 2004, 04:09 PM

Originally Posted by Gollo

Gotta agree with Noo here. Sounds fishy.

You should just reinstall windows and then apply the policy again seeing how it's new hardware. Then you wouldn't have this problem

I am right this time...

**silencio** · April 1st, 2004, 05:13 PM

If you can't connect to the registry with the machine up you can dump the registry in dos, edit one line for group policy processing, recompile the registry, and boot to a machine with gp disabled.

**ap0stle** · April 2nd, 2004, 07:36 AM

Originally Posted by Ya_know

Ok, the registry key that Poledit sets up is at HKLM/network/login the string name is MustBeValidated , should have a value of 1. Either set that to zero, or just delete the string. If you go into safe mode you can get on locally and edit this string, so that when you go back in under normal mode you can function locally, and without a network connection.

This is all presuming that this is poledit we are facing, and not some 3rd party solution…

Yep. I can boot into dos and using edit.com I can see the admin.adm file with a bunch load of settings
I have attached the file <scanned with nav 30th Mar defs>

If you guys can tell me what to change, so that I can logon locally, you'll be my saviour!

**ap0stle** · April 2nd, 2004, 07:40 AM

Sorry Can't attach file! And too big to paste!

**Ya_know** · April 2nd, 2004, 07:48 AM

Boot into Windows safe mode, (Not DOS)!!! Then edit the registry string I told you about above!!!

**ap0stle** · April 2nd, 2004, 08:16 AM

Originally Posted by Ya_know

Boot into Windows safe mode, (Not DOS)!!! Then edit the registry string I told you about above!!!

I can't boot into Windows at all! All I get is domain logon.Esc key does not work because it has been disabled by poledit

I don't know how to edit poledit, cheers

**corturbra** · April 2nd, 2004, 08:22 AM

Originally Posted by ap0stle

I can't boot into Windows at all! All I get is domain logon.Esc key does not work because it has been disabled by poledit

I don't know how to edit poledit, cheers

Safe mode does not ask for a domain login.....

As the machine starts up, after BIOS, start hitting the F8 key until you get a menu come up. Choose Safe Mode. Windows will load with minimal drivers, but you will be able to get into the Registry.

If anyone has a more descriptive/nicer way to get into Safe Mode, please post!

**ap0stle** · April 2nd, 2004, 09:05 AM

Sorry, I new this. I can boot in safe mode but admin functionality is disabled. I can boot into windows in a very crippled safe mode.
I can't run regedit for example

**ap0stle** · April 2nd, 2004, 09:22 AM

In other words. How do I edit the registry when I don't have admin rights because they are set I presume by poledit.

I can't run poledit either.

I can view the admin.adm file in edit.

I have deleted all the settings under category 'network'

Still no joy.

**NooNoo** · April 2nd, 2004, 09:30 AM

OK, its quite obvious to me you are NOT an authorised admin of the system. Please go and get yourself authorised and quit trying to break something that clearly you have no right to do.