Automatic Administrator Login

Well here’s the trick which you can use to prove that Windows XP is not at all secure as multi-user operating system. Hacking the system registry from any account having access to system registry puts you in to the administrator account.

This is what you have to do

Click on start>run(win key+r)

Then tpye “regedit” there, this opens up the registry editor, now goto

HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Winlogon

To enable this function you need to add several new values

1. Add a new string value named ‘DefaultUserName’ and set it to the username you wish to automatically logon as.
2. Add a new string value named ‘DefaultPassword’ and set this to the password for the user entered above.
3. Add a new string value named ‘DefaultDomainName’ and set this to the domain of the user. Ignore this value if the NT box is not participating in NT Domain security.
4. Add a new string value named ‘AutoAdminLogon’ and set it to either ’1′ to enable auto logon or ’0′ to disable it.
5. For Windows 2000 the additional ForceAutoLogon setting must be enabled to stop the tweak from resetting on reboot.

Exit and restart, Windows should not ask for a password and automatically show the desktop of the user.Note: The password is stored in registry, which means anyone who has access to the machine has access to the password.

Note: You can bypass this function by holding down the SHIFT key during the boot or logoff process.

Note: It is also important to note that if the DontDisplayLastUserName value is enabled, the auto logon feature does not function.