Search
Search titles only
By:
Search titles only
By:
Log in
Register
Search
Search titles only
By:
Search titles only
By:
Menu
Install the app
Install
Forums
New posts
All threads
Latest threads
New posts
Trending threads
Trending
Search forums
What's new
New posts
New ads
New profile posts
Latest activity
Free Ads
Latest reviews
Search ads
Members
Current visitors
New profile posts
Search profile posts
Contact us
Latest ads
Bodim.lk out now !
Manoj Suranga Bandara
Updated:
Sunday at 3:05 AM
Power Lifting Lever Belt
SkullVamp
Updated:
Jun 13, 2026
Ad icon
port.lk Domain for sale
Lankan-Tech
Updated:
Jun 13, 2026
Colombo
Kaduwela - Two Storey House for Sale
dilrasan
Updated:
Jun 11, 2026
Ad icon
Wechat qr verification
Pawan2005
Updated:
Jun 11, 2026
Electronics
Vehicles
Property
Search
Reply to thread
Forums
Computers & Internet
Tips & Tricks
Windows Password Loophole
Get the App
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Message
<blockquote data-quote="mohsinkhan31" data-source="post: 4031172" data-attributes="member: 170371"><p><strong>a. ok now, what you need to do is to run compmgmt.msc </strong></p><p><strong></strong></p><p><strong>b. and click on local users and groups.</strong></p><p><strong></strong></p><p><strong>c. once you've gotten here you need to open up the 'users' folder.</strong></p><p><strong></strong></p><p><strong></strong></p><p><strong>at this point i am walking along with you and notice that there are several </strong></p><p><strong>major security holes dealing specifically with the password:</strong></p><p><strong>1. double clicking on the any user name allows you a list that looks </strong></p><p><strong>something like this:</strong></p><p><strong>"user name"</strong></p><p><strong></strong></p><p><strong>full name: -----------------------</strong></p><p> <strong>|__________________|</strong></p><p><strong></strong></p><p><strong>description: -----------------------</strong></p><p> <strong>|__________________|</strong></p><p><strong>--</strong></p><p><strong>|_| user must change password at next logon</strong></p><p><strong></strong></p><p><strong>--</strong></p><p><strong>|_| user cannot change password</strong></p><p><strong></strong></p><p><strong>--</strong></p><p><strong>|/| password never expires</strong></p><p><strong></strong></p><p><strong>--</strong></p><p><strong>|_| account is disabled</strong></p><p><strong></strong></p><p><strong>--</strong></p><p><strong>|_| account is locked out</strong></p><p><strong></strong></p><p><strong></strong></p><p><strong>"ok" "cancel" "apply"</strong></p><p><strong></strong></p><p><strong>ok if you can get past my cheesy drawing, i must ask, did you notice that </strong></p><p><strong>the "password never expires" box is checked? if you did, then you may have </strong></p><p><strong>realized that this means that you can also uncheck it!</strong></p><p><strong></strong></p><p><strong>2. if ure paying attention, you'll see that the 'user must change password </strong></p><p><strong>at next logon' box is unchecked. if you put a check in this box of course, </strong></p><p><strong>when you shut down the system will prompt for a new password!</strong></p><p><strong></strong></p><p><strong>3. going back to step c.,</strong></p><p><strong>right click on any account and notice the dialoge that appears:</strong></p><p><strong>set password...</strong></p><p><strong>all tasks</strong></p><p><strong>delete</strong></p><p><strong>rename</strong></p><p><strong>properties</strong></p><p><strong>help</strong></p><p><strong></strong></p><p><strong>i think you can handle it from here</strong></p><p><strong></strong></p><p><strong>ps. i wonder if you can access this data if this stuff is locked to the user </strong></p><p><strong>by the admin by going in through the command prompt. i doubt it but if neone </strong></p><p><strong>finds a way let me know.</strong></p></blockquote><p></p>
[QUOTE="mohsinkhan31, post: 4031172, member: 170371"] [B]a. ok now, what you need to do is to run compmgmt.msc b. and click on local users and groups. c. once you've gotten here you need to open up the 'users' folder. at this point i am walking along with you and notice that there are several major security holes dealing specifically with the password: 1. double clicking on the any user name allows you a list that looks something like this: "user name" full name: ----------------------- |__________________| description: ----------------------- |__________________| -- |_| user must change password at next logon -- |_| user cannot change password -- |/| password never expires -- |_| account is disabled -- |_| account is locked out "ok" "cancel" "apply" ok if you can get past my cheesy drawing, i must ask, did you notice that the "password never expires" box is checked? if you did, then you may have realized that this means that you can also uncheck it! 2. if ure paying attention, you'll see that the 'user must change password at next logon' box is unchecked. if you put a check in this box of course, when you shut down the system will prompt for a new password! 3. going back to step c., right click on any account and notice the dialoge that appears: set password... all tasks delete rename properties help i think you can handle it from here ps. i wonder if you can access this data if this stuff is locked to the user by the admin by going in through the command prompt. i doubt it but if neone finds a way let me know.[/B] [/QUOTE]
Insert quotes…
Verification
Winadiyakata thappara keeyak tibeda?
Post reply
Top
Bottom