70 replies to this topic

[ludovici]

thanks Vvurat for your help
Medevil: btw. Are you able to install drivers in admin account, just like that?
I can install all the drivers on admin account without modification... I will post this night my batch file for autologon...

[vvurat]

wait for to read that

[MedEvil]

Yes, i can install drivers in admin account, with deras trick.
Without it, i can't do much of anything in admin account.

[vvurat]

what is dera's trick or i missed something?

[MedEvil]

deras trick is to reload peloader in the admin account, to get back system privileges.

So we're basicly switching from system account - to admin account - to system account.

[ludovici]

You can test an other password, an other Domain if you want test...My DefaultPassword is blank ""

reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultDomainName" /d "Workgroup" /f
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultUserName" /d "Administrator" /f
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "ForceAutoLogon" /d "dword:00000001" /f
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "AutoAdminLogon" /d "1" /f
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultPassword" /d "" /f
X:\Windows\system32\tsdiscon.exe

And after in Admin Account (Dera trick)

start /wait pskill.exe explorer.exe
psexec.exe -i -d -s "X:\Program Files\PEShell\PEShell.exe"

Eula in script
hive_load,HKCU
reg_add,0x4,"%reg%\Software\Sysinternals\PsExec","EulaAccepted","1"
reg_add,0x4,"%reg%\Software\Sysinternals\PsKill","EulaAccepted","1"
hive_unload

[vvurat]

Here is my winpeshl.ini

[LaunchApps]
%windir%\system32\netstart.exe,-prompt
%windir%\system32\tsdiscon.exe
%windir%\system32\psexec.exe -i -d -s "%windir%\system32\PEShell.exe"

My added reg values

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE_00\Microsoft\Windows NT\CurrentVersion\Winlogon]

"ReportBootOk"="1"

"Shell"="explorer.exe"

"PreCreateKnownFolders"="{A520A1A4-1780-4FF6-BD18-167343C5AF16}"

"Userinit"="X:\\Windows\\system32\\userinit.exe,"

"VMApplet"="SystemPropertiesPerformance.exe /pagefile"

"AutoRestartShell"=dword:00000001

"Background"="0 0 0"

"CachedLogonsCount"="10"

"DebugServerCommand"="no"

"ForceUnlockLogon"=dword:00000000

"LegalNoticeCaption"=""

"LegalNoticeText"=""

"PasswordExpiryWarning"=dword:00000005

"PowerdownAfterShutdown"="0"

"ShutdownWithoutLogon"="0"

"WinStationsDisabled"="0"

"DisableCAD"=dword:00000001

"scremoveoption"="0"

"ShutdownFlags"=dword:00000007

"DefaultDomainName"="Workgroup"

"DefaultUserName"="Administrator"

"DefaultPassword"=""

"AutoAdminLogon"="1"

"ForceAutoLogon"="1"

At boot it not auto logins. I again fall in login screen. I click on adminstrator. It says preparing desktop, after it says windows is shutting down and closes. What can be wrong here? Only can be this line wrong ("%windir%\system32\psexec.exe -i -d -s "%windir%\system32\PEShell.exe") . Also i added pdh.dll and PsExec.exe files. I did not add eula reg entries. It should first pop up eula screen, execute psexec. But it did not pop up eula screen.

Edit: Ok. It was because (%windir%\system32\psexec.exe -i -d -s "%windir%\system32\PEShell.exe"). If anybody knows correct syntacs of this three parameter command in winpeshl.ini i will be glad to hear that. Again switch user screen. In my all experiments explorer.exe never bothers the registry keys at bottom. It not auto logins. I do not know how you can achieve autologin. And another problem is preparing desktop phaze is very long, probably need to start profsvc or task scheduler services before tsdiscon.exe action.

"DefaultDomainName"="Workgroup"
"DefaultUserName"="Administrator"
"DefaultPassword"=""
"AutoAdminLogon"="1"
"ForceAutoLogon"="1"

[dera]

i think it is not possible to directly logon as Administrator without any user action
if 'winpeshl.exe' used

i mean in that case when in the reg. key 'HKLM\SYSTEM\Setup' in the value 'CmdLine'
the data 'winpeshl.exe' is used then
AutoAdminLogon
DefaultUserName
DefaultPassword
DefaultDomainName
(located in 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon')
do not work at all

Regards,
dera

[Wonko the Sane]

Edit: Ok. It was because (%windir%\system32\psexec.exe -i -d -s "%windir%\system32\PEShell.exe"). If anybody knows correct syntacs of this three parameter command in winpeshl.ini i will be glad to hear that.

WINPESHLI.INI syntax is peculiar:
http://reboot.pro/13716/page__st__3

Try with :

%windir%\system32\psexec.exe, " -i -d -s %windir%\system32\PEShell.exe"

Wonko

[dera]

yes

but seems to me there are little unmatched - (reading this:) - syntax of the different sections
like [LaunchApp] or [LaunchApps]

so @vvurat
1. first time i logon (as usual) as System (using 'winpeshl.exe' as CmdLine)
2. i try to initialize my network and install drivers etc.
3. switch user to Administrator (with user action i.e. klikk:)
4. when i logged in as Administrator i kill the explorer shell (via the GUI Task Manager)
5. then in a cmd window i restart it as System - using psexec
for me 'psexec -i -d -s explorer' works, too

Regards,
dera

[MedEvil]

@ludovici
Could you maybe explain, what to do with the snippets you posted?

[Wonko the Sane]

but seems to me there are little unmatched - (reading this:) - syntax of the different sections
like [LaunchApp] or [LaunchApps]

I am not sure I get your point.

The possible need for double quotes when multiple parameters are used comes from this (already indirectly linked thread):
http://www.msfn.org/...ni-not-running/
http://www.msfn.org/...ng/page__st__12
that it seems to me covers also the [LaunchApp] vs [LaunchApps] issue.


Wonko

[vvurat]

Ok. Also my guess was Ludovici or dera changes user after a complated system user login. As dera's explanation at post #35/1. it shows that the login process works like that and user change occours after a complated system user login. In my previous post i try to autologin directly as soon as netstart.exe or winpeshl.exe works and maybe it is not a good phase to change user. But when i look to Ludovici video it changes the user as soon as boot as i wanted. Ludovici can you post your winpeshl.ini, startnet.cmd or wi7ldr.cfg (i do not remember it's exact name, it is just Joshua's loader that used commonly in winbuilder projects) or pecmd or anything that works at boot for me to investigate. I am not a fan of administrator boot but for interest and knowledge i want to investigate.

[ludovici]

Ludovici can you post your winpeshl.ini, startnet.cmd or wi7ldr.cfg

No problem, i have selected the more important thing

winpeshl.ini
[LaunchApps]
CdUsb.exe
"Shortcuts.exe -f %SystemDrive%\Windows\System32\Win7PE.cfg"

Win7PE.cfg
[autorun]
hidewait|Aero|%SystemRoot%\system32\Ux.exe
wait|network&User|X:\Windows\system32\1.bat

1.bat
X:\Windows\system32\wpeutil.exe InitializeNetwork
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultDomainName" /d "Workgroup" /f
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultUserName" /d "Administrator" /f
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "ForceAutoLogon" /d "dword:00000001" /f
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "AutoAdminLogon" /d "1" /f
reg add "hklm\software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "DefaultPassword" /d "" /f
X:\Windows\system32\tsdiscon.exe

[vvurat]

as i understand from this i need to run ux.exe and patched winload.exe before tsdiscon.exe. nothing seems different.

Until here winpeshl.ini

[LaunchApps]

%windir%\system32\netstart.exe,-prompt

UX.exe

%windir%\system32\tsdiscon.exe

%windir%\system32\psexec.exe," -i -d -s %windir%\system32\PEShell.exe"

makes

Info  	Windows PE Shell beginning execution

Info  	Beginning PNP initialization.

Info  	Winpeshl.ini detected.

Info  	Succeeded launching X:\windows\system32\netstart.exe [X:\windows\system32\netstart.exe -prompt]

Info  	Succeeded launching (null) [UX.exe]

Info  	Succeeded launching (null) [X:\windows\system32\tsdiscon.exe]

Info  	Succeeded launching X:\windows\system32\psexec.exe [X:\windows\system32\psexec.exe  -i -d -s X:\windows\system32\PEShell.exe]

Info  	PNP initialization succeeded.

Info  	PNP Initialization thread terminating.

This means Wonko's trick works. Thank you. It will solve my all other Winpeshl.ini parameter problems. But codes not works as i expected. Now it boots ok. But again switch user screen and after boot it works as psexec.exe never run. If i make

%windir%\system32\psexec.exe," -i -d -s %windir%\system32\PEShell.exe"
%windir%\system32\tsdiscon.exe

now i can see eula that of psexec.exe but again switch user screen and after boot it resets. Maybe that winlogon registry keys need to insert registry at boot time. There is no option left for me

Hımm i think i forgot one thing. Ludovici's "X:\Windows\system32\wpeutil.exe InitializeNetwork" command means my "%windir%\system32\netstart.exe,-prompt" command and Ux.exe needs to run before "%windir%\system32\netstart.exe,-prompt" need to test

No luck.

What can be?

1-)hide wait commands of ludovici can give system more time to process system user login. (i do not like waiting any at boot)
2-)winlogon registry keys need to insert registry at boot time

no else solutions or ideas comes to my mind. need to see ludovici new winbuilder release. and investigate in real time. At least this infos can give ideas about boot process and admin login to developers.

[ludovici]

%windir%\system32\psexec.exe," -i -d -s %windir%\system32\PEShell.exe"
Dera, this command reload winpeshl.exe or not ?
if yes, your tsdicon.exe switch user a second time when you are in admin mode

[vvurat]

It will not reload winpeshl.exe. It will just get explorer.exe to work as system account. nothing else.

[dera]

I am not sure I get your point.

i have no point at all
just want to provide link to an authentic and usefull article - maybe it can help if someone didn't read this yet
(i suppose you, vvurat, ludovici, MedEvil know this article)

Regards,
dera

[Wonko the Sane]

i have no point at all
just want to provide link to an authentic and usefull article - maybe it can help if someone didn't read this yet

Yep , but the essence of the post on MSFN is that seemingly the "authentic article" is either misleading or plainly wrong in describing the syntax to be used (and as such pretty much "unuseful").


Very like :

- In theory there is no difference between theory and practice, but in practice there is. -

Wonko

[dera]

so i don't get your point
so seems i wrote something missleading
ok
link deleted

Regards,
dera

p.s.
anyway, what was written there seems working for me, too
like "Use either but not both."
like "%SYSTEMDRIVE%\mydir\application1.exe -option1 -option2"
or isn't for you?

[TheHive]

http://www.youtube.com/watch?v=EbZSRZzgEE0

Watching the video I noticed you used - Screen2Avi ( Freeware ) Screen Recorder. I dont think ive heard of it. But I am going to download it. It seems like an alternative to Camstudio. All that is missing is the Options --> Enable AutoPan.

Edit: They offer a portable version.

[ludovici]

http://superuser.com...-im-on-a-domain

Note that if no DefaultPassword string is specified, Windows automatically changes the value of the AutoAdminLogon registry key from 1 (true) to 0 (false) to turn off the AutoAdminLogon feature.

For X64 Win7PE

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DefaultDomainName"="Workgroup"
"DefaultUserName"="Administrator"
"AutoAdminLogon"="1"
"ForceAutoLogon"="1"

[Wonko the Sane]

All sorted? ... ...

Yep


Wonko

[dera]

yes, you are right
i thought of the "Winpeshl.ini Files" article
(just my copy-paste was wrong)

Regards,
dera

[dera]

Hi

my attempt:
http://www.mediafire...co2le456m9ob5sa

Regards,
dera