VbScript - Password Reset CS5 Fortres 6

'on error resume next
dim status
dim filesys
dim ccfilesys
Set ccfilesys = CreateObject("Scripting.FileSystemObject")
Set filesys = CreateObject("Scripting.FileSystemObject")
If filesys.FolderExists("c:\Program Files\Fortres Grand\Fortres Security Runtime 6.0\") Then
StorageType
Else
CCsub
End If

dim choice
choice = MsgBox("Do you want to delete this Password Reset file? (Recommended)", vbYesNo)
If choice = 6 then
'Delete the script
DeleteSelf
else
wscript.quit
end if


Sub DeleteSelf()
Dim objFSO
'Create a File System Object
Set objFSO = CreateObject("Scripting.FileSystemObject")
'Delete the currently executing script
objFSO.DeleteFile WScript.ScriptFullName
Set objFSO = Nothing
End Sub

Sub Storagetype

If filesys.FolderExists("c:\Program Files\Fortres Grand\Fortres Security Runtime 6.0\settings\") Then

Set WshShell = CreateObject( "WScript.Shell" )
objStorageValue = WshShell.RegRead("HKLM\Software\Fortres Grand\FSRT\StorageType")
If objStorageValue = 2 then
wscript.echo "Please run this program on your Central Control Server."
wscript.quit
Else
wscript.echo "Storage is set for local machine."

End If

If filesys.FileExists("c:\Program Files\Fortres Grand\Fortres Security Runtime 6.0\Settings\appmgr.ad") then
file = "true"
filesys.DeleteFile "c:\Program Files\Fortres Grand\Fortres Security Runtime 6.0\Settings\appmgr.ad"

End If


If file = "true" then
wscript.echo "Old Password Deleted"
Else
wscript.echo "Password file does not exist." & vbCL & " A new file will be created."
End If


strComputer = "."

Set objWMIService = GetObject("winmgmts:\\" & strComputer)

If filesys.FileExists("c:\Program Files\Fortres Grand\Fortres Security Runtime 6.0\Settings\appmgr.default") Then
file = "true"
Set objFile = objWMIService.Get _
("CIM_DataFile.Name='c:\Program Files\Fortres Grand\Fortres Security Runtime 6.0\Settings\appmgr.default'")
intReturn = objFile.Copy("c:\Program Files\Fortres Grand\Fortres Security Runtime 6.0\Settings\appmgr.ad")
End If
If file = "true" then
wscript.echo "Your Password is now 'password'"
Else
wscript.echo "Default file missing." & vbCL & " Please contact Technical Support."
wscript.quit
End If
Else
wscript.echo "Clean Slate 5.0 or Fortres 101 6.0 is not installed on this machine."
wscript.quit
End if
End Sub

Sub CCSUB
dim ccfilesys
set ccfilesys = CreateObject("Scripting.FileSystemObject")
If ccfilesys.FileExists("c:\Program Files\Fortres Grand\Central Control 6.0\Settings\appmgr.ad") Then
ccfile = "true"
ccfilesys.DeleteFile "c:\Program Files\Fortres Grand\Central Control 6.0\Settings\appmgr.ad"
End if

If ccfile = "true" then
wscript.echo "Old Password Deleted"
Else
wscript.echo "Password file does not exist." & vbCL & " A new file will be created."
End If


strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer)

If ccfilesys.FileExists("c:\Program Files\Fortres Grand\Central Control 6.0\Settings\appmgr.default") Then
Set objFile = objWMIService.Get _
("CIM_DataFile.Name='c:\Program Files\Fortres Grand\Central Control 6.0\Settings\appmgr.default'")
intReturn = objFile.Copy("c:\Program Files\Fortres Grand\Central Control 6.0\Settings\appmgr.ad")
ccfile = "true"

End if

If ccfile = "true" then
wscript.echo "Your Password is now 'password'"
Else
wscript.echo "Default file missing." & vbCL & " Please contact Technical Support."
wscript.quit
End If
End Sub

Locking down windows with group policy

http://www.pcreview.co.uk/forums/showthread.php?t=1710630&goto=nextnewest

Control Panel Restrictions

Control Panel Restrictions

Updated 1/31/00

There are many general restrictions you can make to the Control Panel

1. Start Regedit
2. Go to HKEY_Current_User / Software / Microsoft / Windows / CurrentVersion / Policies
3. Create a new keys under Policies called System
4. You can then add DWORD values set to 1 in the appropriate keys
5. To re-enable them, either delete the key or set the value to 0

• NoDispCPL - Disable Display Control Panel
• NoDispBackgroundPage - Hide Background Page
• NoDispScrSavPage - Hide Screen Saver Page
• NoDispAppearancePage - Hide Appearance Page
• NoDispSettingsPage - Hide Settings Page
• NoSecCPL - Disable Password Control Panel
• NoPwdPage - Hide Password Change Page
• NoAdminPage - Hide Remote Administration Page
• NoProfilePage - Hide User Profiles Page
• NoDevMgrPage - Hide Device Manager Page
• NoConfigPage - Hide Hardware Profiles Page
• NoFileSysPage - Hide File System Button
• NoVirtMemPage - Hide Virtual Memory Button

Group Policy Documentation Survival Guide

 

 

http://www.microsoft.com/downloads/details.aspx?familyid=66643D52-BD3D-4B10-972C-316ECA5DBEDF&displaylang=en

Fixing Group Policy structural issues

 

Fixing Group Policy structural issues
URL: http://technet2.microsoft.com/WindowsServer/en/library/6d8b6979-7085-45a8-9386-064ff25b719d1033.mspx

Fixing Group Policy scoping issues

 

Fixing Group Policy scoping issues
URL: http://technet2.microsoft.com/WindowsServer/en/library/7dc5c46c-87cd-4ae9-8dd6-9b3b55195fd51033.mspx

Fixing Group Policy processing issues

 

Fixing Group Policy processing issues
URL: http://technet2.microsoft.com/WindowsServer/en/library/20e1b1dc-5a5a-4ee5-9a1a-31bffce6a2de1033.mspx

Fixing Group Policy networking issues

 

Fixing Group Policy networking issues
URL: http://technet2.microsoft.com/WindowsServer/en/library/17a8f692-cc79-4dfa-b95d-1ee2ff0410ee1033.mspx

Fixing Core Group Policy problems

 

Fixing Core Group Policy problems
URL: http://technet2.microsoft.com/WindowsServer/en/library/6bc554ca-017a-4e30-a0bb-8e87eb646f8c1033.mspx

Group Policy - deploy and manage software

 

 

http://i.i.com.com/cnwk.1d/i/tr/downloads/home/0735622175_chapter_9.pdf

GPMC - Group Policy Management Console

 

 

http://www.microsoft.com/downloads/details.aspx?familyid=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

Password Cracks

 

 

http://sectools.org/crackers.html

Password Reset

 

 

·         I downloaded EBCD (http://ebcd.pcministry.com/). It's an ISO that basically has a Linux flavor on it but it boots straight into an easy-to-use menu. You just select the windows password reset option, select the defaults for file locations, and then select the user and the password to change. I've used it on Windows 2000 machines, Windows XP machines, Windows 2000 Server machine. Works flawlessly. One recommendation: If you do use it, just use * as the new password. This will blank out the old password. Then you can boot into windows and safely login with no password and change it to whatever you like. Sometimes these utilities have issues with different flavors of windows re-encrypting a new password so it's best to just blank it out.

 

Password Reset

 

 

Can't Log On to Windows XP?

If that’s your only problem, then you probably have nothing to worry about. As long as you have your Windows XP CD, you can get back into your system using a simple but effective method made possible by a little known access hole in Windows XP.

This method is easy enough for newbies to follow – it doesn’t require using the Recovery Console or any complicated commands. And it’s free - I mention that because you can pay two hundred dollars for an emergency download of Winternals ERD with Locksmith which is a utility for unlocking lost Windows passwords. See here http://www.winternals.com/products/repairandrecovery/locksmith.asp

ERD is an excellent multi purpose product, but you should know it is not a necessary one if you have a healthy system and your sole problem is the inability to logon to Windows due to a forgotten password. Not necessary because you can easily change or wipe out your Administrator password for free during a Windows XP Repair. Here’s how with a step-by-step description of the initial Repair process included for newbie’s.

1. Place your Windows XP CD in your cd-rom and start your computer (it’s assumed here that your XP CD is bootable – as it should be - and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd Typically, it will be “Press any key to boot from cd”

3. Once you get in, the first screen will indicate that Setup is inspecting your system and loading files.

4. When you get to the Welcome to Setup screen, press ENTER to Setup Windows now

5. The Licensing Agreement comes next - Press F8 to accept it.

6. The next screen is the Setup screen which gives you the option to do a Repair.

It should read something like “If one of the following Windows XP installations is damaged, Setup can try to repair it”

Use the up and down arrow keys to select your XP installation (if you only have one, it should already be selected) and press R to begin the Repair process.

7. Let the Repair run. Setup will now check your disks and then start copying files which can take several minutes.

8. Shortly after the Copying Files stage, you will be required to reboot. (this will happen automatically – you will see a progress bar stating “Your computer will reboot in 15 seconds”

9. During the reboot, do not make the mistake of “pressing any key” to boot from the CD again! Setup will resume automatically with the standard billboard screens and you will notice Installing Windows is highlighted.

10. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

11. At the prompt, type NUSRMGR.CPL and press Enter. Voila! You have just gained graphical access to your User Accounts in the Control Panel.

12. Now simply pick the account you need to change and remove or change your password as you prefer. If you want to log on without having to enter your new password, you can type control userpasswords2 at the prompt and choose to log on without being asked for password. After you’ve made your changes close the windows, exit the command box and continue on with the Repair (have your Product key handy).

13. Once the Repair is done, you will be able to log on with your new password (or without a password if you chose not to use one or if you chose not to be asked for a password). Your programs and personalized settings should remain intact.

I tested the above on Windows XP Pro with and without SP1 and also used this method in a real situation where someone could not remember their password and it worked like a charm to fix the problem. This security hole allows access to more than just user accounts. You can also access the Registry and Policy Editor, for example. And its gui access with mouse control. Of course, a Product Key will be needed to continue with the Repair after making the changes, but for anyone intent on gaining access to your system, this would be no problem.

And in case you are wondering, NO, you cannot cancel install after making the changes and expect to logon with your new password.

Cancelling will just result in Setup resuming at bootup and your changes will be lost.

Ok, now that your logon problem is fixed, you should make a point to prevent it from ever happening again by creating a Password Reset Disk. This is a floppy disk you can use in the event you ever forget your log on password. It allows you to set a new password.

Here's how to create one if your computer is NOT on a domain:

• Go to the Control Panel and open up User Accounts.
• Choose your account (under Pick An Account to Change) and under Related Tasks, click "Prevent a forgotten password".
• This will initiate a wizard.
• Click Next and then insert a blank formatted floppy disk into your A: drive.
• Click Next and enter your logon password in the password box.
• Click Next to begin the creation of your Password disk.
• Once completed, label and save the disk to a safe place

How to Log on to your PC Using Your Password Reset Disk

Start your computer and at the logon screen, click your user name and leave the password box blank or just type in anything. This will bring up a Logon Failure box and you will then see the option to use your Password Reset disk to create a new password. Click it which will initiate the Password Reset wizard. Insert your password reset disk into your floppy drive and follow the wizard which will let you choose a new password to use for your account.

Note: If your computer is part of a domain, the procedure for creating a password disk is different.

See here for step by step instructions: http://support.microsoft.com/default.aspx?scid=KB;en-us;306214&

 

Reset Password

Can't Log On to Windows XP?
If that’s your only problem, then you probably have nothing to worry about. As long as you have your Windows XP CD, you can get back into your system using a simple but effective method made possible by a little known access hole in Windows XP.
This method is easy enough for newbies to follow – it doesn’t require using the Recovery Console or any complicated commands. And it’s free - I mention that because you can pay two hundred dollars for an emergency download of Winternals ERD with Locksmith which is a utility for unlocking lost Windows passwords. See here http://www.winternals.com/products/repairandrecovery/locksmith.asp
ERD is an excellent multi purpose product, but you should know it is not a necessary one if you have a healthy system and your sole problem is the inability to logon to Windows due to a forgotten password. Not necessary because you can easily change or wipe out your Administrator password for free during a Windows XP Repair. Here’s how with a step-by-step description of the initial Repair process included for newbie’s.
1. Place your Windows XP CD in your cd-rom and start your computer (it’s assumed here that your XP CD is bootable – as it should be - and that you have your bios set to boot from CD)
2. Keep your eye on the screen messages for booting to your cd Typically, it will be “Press any key to boot from cd”
3. Once you get in, the first screen will indicate that Setup is inspecting your system and loading files.4. When you get to the Welcome to Setup screen, press ENTER to Setup Windows now
5. The Licensing Agreement comes next - Press F8 to accept it.
6. The next screen is the Setup screen which gives you the option to do a Repair.It should read something like “If one of the following Windows XP installations is damaged, Setup can try to repair it”
Use the up and down arrow keys to select your XP installation (if you only have one, it should already be selected) and press R to begin the Repair process.
7. Let the Repair run. Setup will now check your disks and then start copying files which can take several minutes.
8. Shortly after the Copying Files stage, you will be required to reboot. (this will happen automatically – you will see a progress bar stating “Your computer will reboot in 15 seconds”
9. During the reboot, do not make the mistake of “pressing any key” to boot from the CD again! Setup will resume automatically with the standard billboard screens and you will notice Installing Windows is highlighted.
10. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.
11. At the prompt, type NUSRMGR.CPL and press Enter. Voila! You have just gained graphical access to your User Accounts in the Control Panel.
12. Now simply pick the account you need to change and remove or change your password as you prefer. If you want to log on without having to enter your new password, you can type control userpasswords2 at the prompt and choose to log on without being asked for password. After you’ve made your changes close the windows, exit the command box and continue on with the Repair (have your Product key handy).
13. Once the Repair is done, you will be able to log on with your new password (or without a password if you chose not to use one or if you chose not to be asked for a password). Your programs and personalized settings should remain intact.
I tested the above on Windows XP Pro with and without SP1 and also used this method in a real situation where someone could not remember their password and it worked like a charm to fix the problem. This security hole allows access to more than just user accounts. You can also access the Registry and Policy Editor, for example. And its gui access with mouse control. Of course, a Product Key will be needed to continue with the Repair after making the changes, but for anyone intent on gaining access to your system, this would be no problem.
And in case you are wondering, NO, you cannot cancel install after making the changes and expect to logon with your new password.
Cancelling will just result in Setup resuming at bootup and your changes will be lost.
Ok, now that your logon problem is fixed, you should make a point to prevent it from ever happening again by creating a Password Reset Disk. This is a floppy disk you can use in the event you ever forget your log on password. It allows you to set a new password.
Here's how to create one if your computer is NOT on a domain:
Go to the Control Panel and open up User Accounts.
Choose your account (under Pick An Account to Change) and under Related Tasks, click "Prevent a forgotten password".
This will initiate a wizard.
Click Next and then insert a blank formatted floppy disk into your A: drive.
Click Next and enter your logon password in the password box.
Click Next to begin the creation of your Password disk.
Once completed, label and save the disk to a safe place
How to Log on to your PC Using Your Password Reset Disk
Start your computer and at the logon screen, click your user name and leave the password box blank or just type in anything. This will bring up a Logon Failure box and you will then see the option to use your Password Reset disk to create a new password. Click it which will initiate the Password Reset wizard. Insert your password reset disk into your floppy drive and follow the wizard which will let you choose a new password to use for your account.
Note: If your computer is part of a domain, the procedure for creating a password disk is different.
See here for step by step instructions: http://support.microsoft.com/default.aspx?scid=KB;en-us;306214&