How to restore "automatic logon" ?
Hi,I'm trying to get a better understanding of the "automatic logon" in Windows XP (SP3). I would like to automate the following steps :1. Detect if autologon is enabled on the computer.2. If so, backup the settings (username/password/domain/forcedautologon?)3. Reboot & autologon with administrative credentials, to perform some administrative tasks (automatically install updates / software updates). Maybe reboot a couple of times and autologon with these credentials, if the update process requires it (some apps require immediate reboot before installing any other updates related to that same app)4. Restore the settings from "2." and reboot, so that the computer logs on automatically again with the account that was configured previously.On some of our (domain) computers, (forced) autologon is enabled indeed. These computers are mainly touchscreen kiosks in our showrooms, which enable customers to browse for information. After each update session, we overwrite the (manually configured) autologin information, which means that someone has to go onsite to reconfigure the autologon.So I've been playing around a bit with autologon, to see where the autologon data is stored. According to following KB (http://support.microsoft.com/kb/315231), there are 2 possibilities to configure autologon :1. Using the registry. Configure the following settings :- HKLM\Software\Microsoft\Windows NT\Currentversion\Winlogon\DefaultUserName "username"- HKLM\Software\Microsoft\Windows NT\Currentversion\Winlogon\DefaultPassword "password"- HKLM\Software\Microsoft\Windows NT\Currentversion\Winlogon\DefaultDomain "domain"- HKLM\Software\Microsoft\Windows NT\Currentversion\Winlogon\AutoAdminLogin "1"- HKLM\Software\Microsoft\Windows NT\Currentversion\Winlogon\ForceAutoLogon "1" (if you want to force the auto logon after log off as well?)This is not recommended I think, as the password is stored in clear text in the registry, available to all authenticated users to see.Also : on our computers which have autologon configured, the "DefaultPassword" string does not exist... Which leads to "2" :2. Using the GUI. Uncheck "Users must enter a password to use this computer", click "OK", and you will be prompted to enter the credentials. Click OK twice, and reboot.The system logs on automatically. But here's the catch : the password is NOT stored in the "DefaultPassword" string, the string does not even exist!! So my question is : where is the password stored with the second method? And is there a way to backup & restore it?I've already tampered a bit with exporting "[HKEY_LOCAL_MACHINE\SECURITY\Policy\Secrets\DefaultPassword]" after having provided the credentials, and then importing this again to simulate the restore, but it does not work. Any help/thoughts would be greatly appreciated!1 person needs an answerI do too
August 31st, 2010 10:06am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics