Computing.Net > Forums > Windows NT > Disable Sys Admin restrictions

Disable Sys Admin restrictions

Reply to Message Icon

Original Message
Name: Jeff
Date: September 13, 2001 at 12:20:50 Pacific
Subject: Disable Sys Admin restrictions
Comment:

This year at my high school the sys administrator when nuts on restrictions. We can't even open up notepad or the calculator. We have no access to the c:\ drive and it makes everything a pain in the ass. My engineering teacher is pissed too cause it makes everything harder. Does anyone know how I can override admin and gain access to things such as these? If you don't know how can you point me to a site that does?? Thanks.

Jeff


Report Offensive Message For Removal


Response Number 1
Name: Preacher Dan
Date: September 13, 2001 at 18:57:35 Pacific
Reply: (edit)

Not that you'll respect this reply, but speaking for the side that imposes those type of restrictions on users, I can tell you they are there for several reasons. One being lowering the support cost /per user. I could go on for several minutes on this one point alone, but if you really need calculator - buy one. Your school's tax dollars (provided by nice folks like me) could be better served if you experiment with the exploits of notepad on your home PC.
(unless your dad's got it locked down, too)
These things will become apparent when you have your own LAN to support.


Report Offensive Follow Up For Removal

Response Number 2
Name: Kristof
Date: September 14, 2001 at 02:29:31 Pacific
Reply: (edit)

It sounds like the admin went a little overboard with the security restrictions though. Too much security makes a system inoperable.

Still, there's no way to bypass the admin and gain access to things he secured, that's the whole point of security.

Ofcourse, you could always go and ask him nicely if he will reduce the restrictions to a more usable level.

K.


Report Offensive Follow Up For Removal

Response Number 3
Name: Ian
Date: September 14, 2001 at 08:04:10 Pacific
Reply: (edit)

not a chance, id complain about it and if ur teacher is getting anoid then why doesn't he/she do something about, know watta mean


Report Offensive Follow Up For Removal

Response Number 4
Name: dan
Date: September 14, 2001 at 10:12:54 Pacific
Reply: (edit)

Restricting users from calculator and note pad lowers the cost of support? HAH. A sys admin who implements that kind of crap has a little TOO MUCH time on his/her hands, IMHO.


Report Offensive Follow Up For Removal

Response Number 5
Name: Chase
Date: September 14, 2001 at 15:52:42 Pacific
Reply: (edit)

Far too much time, and no respect for his/her users. There's a limit, and making systems virtually unusable is far beyond that.

Try this:

Right-click the Start button, select Explore.

Navigate your way to C:\winnt\system32. Right-drag the icon for Notepad to your desktop, and select "Create shortcut".

If you get denials on accessing the file itself, then the security restrictions go all the way to the file level, and are incorrect. Users MUST have permissions to some of the files there, simply to run the systems.

HTH,
Chase


Report Offensive Follow Up For Removal


Response Number 6
Name: Preacher Dan's Reply
Date: September 14, 2001 at 16:21:56 Pacific
Reply: (edit)

!!!Opinion alert!!!
Here's the deal - the sys admin needs to answer to the school board and be fiscally responsible, and needs to impose enough restrictions to keep curious users from creating problems with the systems. Something as simple as resetting the wallpaper makes some sys admins nervous (maybe they're in the wrong profession), but in the real world, anything that causes time to fix, wastes time! Sure, notepad and calculator are harmless, but where do you draw the line. They apparently drew the line and chose to make the systems barely functional for the curriculam (hopefully). Anything else is the school's right to lock down as they choose.
The problem comes in when Microsoft publishes all the restrictions you can impose and the inexperienced people in charge think that they can simply do all of them and have a secure system - but reality is most of them conflict, cancelling out any productivity. I see it all of the time.

Best wishes.

Keep up the good work Chase.


Report Offensive Follow Up For Removal

Response Number 7
Name: Chase
Date: September 15, 2001 at 10:59:29 Pacific
Reply: (edit)

I have to say I agree, and I've posted more than once against people getting around the imposed security settings. However, let's be serious about this for a second. Restricting the calaulator? Surely everyone's got to agree that's taking it a bit too far.

Merely finding a way around the situation, while it may be possible, isn't really the way to fix it. The admin needs to look quite seriously at the restrictions he/she's imposed, and evaluate how worthwhile it is.

I've got systems under my control where I've restricted the wallpaper from being changed. Sure, they're sensitive systems on strictly controlled networks, and this degree of control is required for this situation. but I'd never think to stop the user from using a calculator.

This is all just my opinion, but I've been making this crap work now for just over 20 years.

Chase


Report Offensive Follow Up For Removal

Response Number 8
Name: Otacon
Date: February 13, 2002 at 17:20:47 Pacific
Reply: (edit)

Hm... Looks like you could use a little help. I have a little bit of help that may indeed help you, heh. Okay, first of all, I'm going to list several possible options for you, or anyone that may stumble onto this, mkay? Now pay attention.
1) Do you have an MP3 player that can be hooked up via USB?

If the answer is yes, than you have just discovered one possibility to bend the rules. Shall I explain? Okay. While at home on your home computer, if you have one, make a shortcut to any program you choose on your computer that is on the restricted computer that you wish to access. Catching on yet? If your MP3 player is like mine, when you plug it in via USB a little install menu opens up and should run automatically, saying something about a portable storage device, and there you go. When ever you plug it in and turn it on, a little window should pop up displaying the contents of your MP3 players memory card. If it does not, you should be able to find a way to access it, since your system admin probably didn't take any precautions in preventing USB storage device access.
You could also just put the actual program on your mp3 player if you have enough space on your memory card. But at my school, the Admin disabled all xfering of files onto the harddrives from cdroms and floppy's. I have yet to use my MP3 player to see if i can, but im positive it will work in your case.

2)Try rebooting the restricted computer, right before the 'starting windows xx' window comes up, the one with the big windows picture or what ever, you should be able to hit F8 to bring up a menu of alternate boot methods. Such as: Normal(boots the system as if you hadnt hit F8), Safe Mode(boots the system into windows, but with out loading any drivers but drivers necessary to boot into windows, does not have network support, which means no novell!), and Command Prompt(boots into DOS. If you dont know what dos is, you shouldnt be reading this article at all.)
Mkay. Heres the possibilities. If you boot into safe mode, you should be able to do whatever you like with the system. but, as soon as you boot back up to normal mode and log in, it wont be the same and you still wont be able to access any other drives. This is only useful for getting files onto the computer. Running them after logging into the system is a different problem. After you do what you like here, reboot the system and er... log in i guess, the files will be where you put them. I suggest putting all files into My Documents on the desktop, that is, if you have a desktop.
Booting into dos is also useful for transferring files to the computer as well as running DOS applications. This can be handy if you need to crack a BIOS password or what ever. That way you can run it in dos, grab the password and reboot and get into the bios.

3)If you cant use F8, i suggest you pop in a windows boot disk and reboot the computer. If the computer is set to boot from floppy, than you will get a menu asking if you want to start windows setup or boot into ms-dos. choose to boot into ms-dos, and from there you can choose wether or not you want cdrom support, id choose yes, just for the sake of xfering files from cd to the computer. Yet another way of getting into dos.

4)A way to access the C: drive:
After you login, if you have a My Documents folder on your desktop, you can access the c: drive. I shall explain how.
First, double click on my documents. Once in My documents look and see if there is any other folders in it. If there are , go into that folder, and you should at the top of your my documents window see one of those little 'up' arrows, which allows you to go one directory, or folder up from your current. Click that, and it should take you back to my documents. do it once more, and you will be in the C: drive. hehe. This will only work if you go into a folder WITHIN my documents.

5) another way to access C: drive is this.
Do you have ANY word processors at all on the computer? If you do, chances are that you can get into the c: drive from within the word processer. here:
go to file and open, or whatever you go to to open an existing document. what ever directory your in, you go up several directory's just like you did in my documents, if theres no c: drive, then your S>O>L on that idea.

6) If you can do this inconspicuously, you can get away with it. To get on the computer without any restrictions whatsoever, just unplug the network cable from the back of the pc, and boot it up. When it boots you will see another loging screen, but its only a windows login screen, and no real login name and password are required. In fact, you could type in ANY random name and password and it shall create an account in windows with that name. Or just hit escape, which would be wiser, that way if they find out someone has been tampering with the pc, you could just say it booted up like that. If theres a login name you created, its proof that someone diliberatly did that. anyway, after the computer is fully booted and you hit escape or what ever, you may be able to plug in the network cable back into the computer, and get online w/o any restrictions as well. If it doesnt work, and says crap like not connected to the internet , just go into network properties and change the TCP/IP settings for the network adapter in the pc to auto everything, auto discover IP, DNS, and be sure to enable DHCP server as well. then hit apply. You may need a windows cd after you hit apply. But most likely you will not. if you do, dont fret, you have full access remember? hehe. so just pop in the cd, let it do its thang, then youll be asked to reset the pc. do so. but be sure to unplug the cable again until you have booted the computer back into windows. hehe.

7)to access notepad when your logged in, if you ever gain access to the c: drive in any way using any method possible, above , or beyond, hehe, you should see a file called autoexec.bat on the root of the c: drive, just right click on it and hit edit. it will take you into note pad. open a new notepad document from within notepad, and i advise you not to tamper with the autoexec.bat file at all unless you know what your doing, etc., etc.

Well, that is all I can come up with off the top of my head at the moment.

As for the deal with notepad, there is a reasonably high security risk when allowing just anyone to use notepad. You can use notepad to create batch files, which are kind of like executables. There are hundreds of ways to destroy a computer using batch files, many of which are able to be executed upon the booting of the computer via the autoexec.bat file. But thats a whole essay in itself.

I hope I've been of some use to you. If anyone is succesful in thier quest's, I ask you one favor, email me and tell me about it. Heheh, I always enjoy hearing stories like that.

Anyone else that has any questions pertaining to any material or anything contained in this document, please, feel free to contact me via aol instant messanger, or email. my aol instant messanger name is WireTapTerrorist
And my email is mentioned above, but i will tell you again, hehe, OtaconUHS@msn.com

Oh, and I almost forgot, my website has convienent 'backups' of many Anime movies, episodes, and other motion pictures.

www.os3.bdku.com

I'm online pretty much all the time between the hours of 4pm and 11pm during the week, and anytime before 4 am after 12 noon during the weekends. peace out.

Otacon


Report Offensive Follow Up For Removal

Response Number 9
Name: Big P
Date: February 20, 2002 at 18:17:19 Pacific
Reply: (edit)

Personaly
I just want the admin user and pw
so i can get on it and do anything i want
what pissed me off is trhey dont allow u to connect to ip addressed through IE
and i want to do that because i want to dl games and movies
and since i hate my school
i want to mess up thier networks and s---
grrr
anyone agree with me, lol



Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Disable Sys Admin restrictions

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes Today.
Discuss in The Lounge