Registry entries via netlogon batch file

Peter Samuelson peter at cadcamlab.org
Thu May 18 04:09:08 GMT 2000


[Chris Tooley <ctooley at joslyn.org>]
> Is there any way to make registry changes to a client machine (change
> a DWORD value and a key value).

`rpcclient' is made for this sort of thing, although I don't know if
there's a version out there that can connect to a Win95/98 registry.
You might look around.  I know the TNG one craps out with Win98.

> When they logon to the OLDDC server I want to make the necessary
> registry changes to change the Domain they are logging into and to
> disable PlainTextPasswords (which is very easy to do).  The next time
> they reboot, they never know the difference other than some of the
> names have changed, which they won't notice anyway.

If you can find a `rpcclient' that gets along with Win95, do this:

for m in win95box1 win95box2 win95box3 win98box1 win98box2 win98box3; do
  rpcclient -S $m -c \
    'regsetval hkey_local_machine\system\currentcontrolset\services\vxd\vnetsup\enableplaintextpassword 4 0; quit'
done

> Does anyone see any holes in this and if it seems somewhat plausible can
> someone tell me how to make the registry changes via the Netlogon
> script?

You can give REGEDIT.EXE an import file (like the ones in samba/docs/)
and it will plug it right in.  (At least the REGEDIT.EXE for NT....)
There's a flag for quiet/unprompted operation, though I don't remember
what it is.

Peter


More information about the samba-ntdom mailing list