Everyone knows that in Windows 2000 / XP, if you are an administrator, even if you don't know the password of other users (administrators), you can change your password with the NET USER account password. It is said that MS is for the convenience of users (such as users forget password). In addition, users can also add accounts to the administrators group with the NET localGroup Administrators account / add command. However, if you are not an administrator, such as a guest account, you can't use the above command on the surface, but we can use it through some channel. Example: Create a administrator one as a guest account, create a batch file, the content is as follows: Net user admin / add net localgroup administrators admin / add to save the above batch file as admin.bat. Note: The above batch file The role is to create an administrator account called Admin (the password is empty).
Second, the batch file is started as a boot startup script of Windows. 1. Enter GPEDIT.MSC 2 in the Run dialog, locate it to computer configuration 1> script (start / shutdown), double-click the start of the window, add previously created admin.bat. 3, restart the computer, the system has an administrator called Admin
The above operation is feasible in Windows 2000 / XP, but to ensure that the account can access the registry, the group policy (creating an account is actually added to add the corresponding items and values in the registry), and the default guest in Windows / Restricted accounts are not limited. Perhaps, we don't need to create an administrator with a guest account, but if a program only has administrator executable, can it be implemented?
Summary: The Windows system defaults to the Guest / restricted account limit is only on the surface. As an experienced system administrator, there are still many things to do, and the at least should prohibit the restricted user access / modify the registry, Group Policy, etc.
