In normal mode of Win2000 / XP, we can use the way in the registry:
In HKEY_LOCAL_MACHINE / SOFTWARE / Microsoft / Windows NT / CurrentVersion / Winlogon
Add your own Gina DLL to implement Windows login control. But in safe mode, Windows Winlogon. EXE does not call registry
The Gina DLL specified in. But use the default msgina.dll to log in. We can change it, implement the security mode Gina as follows
replace:
A. Load your own Gina in the way in the registry (hypothesis list gina.dll)
B. Since Msgina will be called by Winlogon when the system starts, it can only perform the rename operation of the file in Ginaa.dll's WLXNegotiate.
Take Ginaa.dll -> msgina.dll; msgina.dll -> msoldgina.dll
C. So our Gina became Msgina.dll. It can be made of Windows.
