First, you have to have a 3389 broiler (how to find the broiler is not in this tutorial, please forgive me), login the broiler! Since my broiler today is not online, I will take a friend's machine!
Step 1: Log in to the broiler, find my computer, then click on my computer, select management, local users, groups, users, right clicking GUEST, select attribute, remove the account to deactivate the hook, Then choose to be affiliated, add admin rights to Guest (if you don't add it), set your password, ok ~! !
Step 2: Then run the cmd == "regedt32 find the top SAM, Win2000 is gray, click the permission (Win2000) is clicked safe =" completely accessed in the Administrator point, OK, exit! After setting up, enter cmd == "regedit, find hkey_local_machine / sam / sam / domains / account / users to see there are many users, huh, my account is pulling! Let's see that 1F4 represents the system administrator privilege! What we have to do is copy registration information of administrator privileges in the registry to guest. Export 1F4 and 1F5 (1F5 is a registration information of GUSET privilege) and guest registry. Ok
Step 3: Put 1F4 HEX: 02,00,01,00,00,00, 00, 0E, 62, Ba, C5, EC, E8, C4, 01, 100, 100, 00, 00, 00, / 00, F2, D3, 75, 5B, DC, 43, C4, 01, 100, 100, 100, 100, 100, 00, EE, 4A, A7, Fe, DA E3, C4, 01, / F4, 01, 100, 01, 02, 100, 100, 10, 02, 100, 100,000, 100, 100, 100, 2A, 02, 01, 00, 00, 00, 01, / 00, 00, 00, 00, 00! Then open 1F5, paste the 1f4 copied fields to the same field of 1F5, and then copy all the registration information outside the Windows Registry Editor Version 5.00 in addition to all the registration information outside the Windows Registry Editor Version 5.00. Open the guest registry, paste all the information copied in 1F5 to the inside. .
Step 4: Go to my computer management, stop your Guest account and cancel the permissions! OK, now importing the Guest's registry! All right! Remove all exported 1f4, 1f5 and guest! Let's see, the Guest account of our naked eye is still disabled (Win2000 is a start-up status, we deactivate it to OK!) Now login! OK! ! ! Landing it! How, this is very deceptive? The general administrator will not think that the seemingly disabled guest will be our JJ account! ! Ha ha!
