OVO JE SAMO INFORMATIVNO I EDUKACISKO
http://www.03am.com
http://www.sysinternals.com/

Code:
The following is how to trick NT4 to make NTW = NTS by
changing the Registry settings.
FYI the worker threads that guard the Registry settings
HKEY_LOCAL_MACHINE/SYSTEM/Setup/SystemPrefix and
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/ProductOptions/
ProductType do take changes back immmediatly after you make them.
Further the thread that guards the ProductType setting issues a
warning if anything is changed in the ProductOptions section.
For testing purposes do the following to make my NT4
Workstation 'behave' like an NT4 Server:
1) Write down the following settings in your Registry:
(values for my PC in parentheses)
HKEY_LOCAL_MACHINE/SYSTEM/Setup/SystemPrefix: (REG_BINARY:
D71B0000000032D8)
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/ProductOptions/Produ
ctType: (REG_SZ: WinNT)
2) Make a copy of each entry as:
HKEY_LOCAL_MACHINE/SYSTEM/Setup/SxstemPrefiy: (REG_BINARY:
D71B0000000032D8)
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/PorductOptions/
Type: (REG_SZ: WinNT)
(Notice the exchange of 'x' and 'y' in "SxstemPrefiy" and 'o' and
'r' in "PorductType"!)
3) go to directory %SystemRoot%System32, copy ntoskrnl.exe to
ntoskrnl.pat
4) Patch ntoskrnl.pat in the following locations (offsets) to reflect
the above changes:
exchange 0x053088 and 0x05309C ('SxstemPrefiy') exchange
0x052F16 and 0x052F18 ('PorductOptions') exchange 0x0BEB2E and
0x0BEB42 ('SxstemPrefiy') exchange 0x0BEBB0 and 0x0BEBB2
('ProductOptions')
(the *exchanging* is necessary to make the NTOSKRNL.EXE not to
appear corrupt, so the checksum does match)
5) rename ntoskrnl.exe to ntoskrnl.org (it is in use by the system, so
you can only rename it)
6) rename ntoskrnl.pat to ntoskrnl.exe (this is to boot with our
patched version)
7) shut down and reboot your system Notice: if your system is on a
NTFS partition, be sure to have a second 'Maintainance NT' installed
to undo the above changes in case of a failure.
8) After rebooting, make the following changes to the registry (notice
the guard thread watches
'SxstemPrefix' and 'PorductOptions' now):
HKEY_LOCAL_MACHINE/SYSTEM/Setup/SystemPrefix: (REG_BINARY:
D71B0000000032DC) "change D8 to DC!]
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/ProductOptions/
ProductType: (REG_SZ: ServerNT)
9) go to %SystemRoot%System32, rename ntoskrnl.exe to ntoskrnl.pat
and rename ntoskrnl.org to
ntoskrnl.exe.
10) Shut down and reboot. You should see no logon screen during login
but now you have an NT Server.
The following is how to trick NT4 to make NTW = NTS by
changing the Registry settings.
FYI the worker threads that guard the Registry settings
HKEY_LOCAL_MACHINE/SYSTEM/Setup/SystemPrefix and
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/ProductOptions/
ProductType do take changes back immmediatly after you make them.
Further the thread that guards the ProductType setting issues a
warning if anything is changed in the ProductOptions section.
For testing purposes do the following to make my NT4
Workstation 'behave' like an NT4 Server:
1) Write down the following settings in your Registry:
(values for my PC in parentheses)
HKEY_LOCAL_MACHINE/SYSTEM/Setup/SystemPrefix: (REG_BINARY:
D71B0000000032D8)
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/ProductOptions/Produ
ctType: (REG_SZ: WinNT)
2) Make a copy of each entry as:
HKEY_LOCAL_MACHINE/SYSTEM/Setup/SxstemPrefiy: (REG_BINARY:
D71B0000000032D8)
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/PorductOptions/
Type: (REG_SZ: WinNT)
(Notice the exchange of 'x' and 'y' in "SxstemPrefiy" and 'o' and
'r' in "PorductType"!)
3) go to directory %SystemRoot%System32, copy ntoskrnl.exe to
ntoskrnl.pat
4) Patch ntoskrnl.pat in the following locations (offsets) to reflect
the above changes:
exchange 0x053088 and 0x05309C ('SxstemPrefiy') exchange
0x052F16 and 0x052F18 ('PorductOptions') exchange 0x0BEB2E and
0x0BEB42 ('SxstemPrefiy') exchange 0x0BEBB0 and 0x0BEBB2
('ProductOptions')
(the *exchanging* is necessary to make the NTOSKRNL.EXE not to
appear corrupt, so the checksum does match)
5) rename ntoskrnl.exe to ntoskrnl.org (it is in use by the system, so
you can only rename it)
6) rename ntoskrnl.pat to ntoskrnl.exe (this is to boot with our
patched version)
7) shut down and reboot your system Notice: if your system is on a
NTFS partition, be sure to have a second 'Maintainance NT' installed
to undo the above changes in case of a failure.
8) After rebooting, make the following changes to the registry (notice
the guard thread watches
'SxstemPrefix' and 'PorductOptions' now):
HKEY_LOCAL_MACHINE/SYSTEM/Setup/SystemPrefix: (REG_BINARY:
D71B0000000032DC) "change D8 to DC!]
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/ProductOptions/
ProductType: (REG_SZ: ServerNT)
9) go to %SystemRoot%System32, rename ntoskrnl.exe to ntoskrnl.pat
and rename ntoskrnl.org to
ntoskrnl.exe.
10) Shut down and reboot. You should see no logon screen during login
but now you have an NT Server.
Pozdrav StratOS
"Multitasking - ability to f##k up several things at once."
"It works better if you plug it in."
"As a rule, software systems do not work well until they have been used, and have failed repeatedly, in real applications."
"The one who is digging the hole for the other to fall in is allready in it."
"Multitasking - ability to f##k up several things at once."
"It works better if you plug it in."
"As a rule, software systems do not work well until they have been used, and have failed repeatedly, in real applications."
"The one who is digging the hole for the other to fall in is allready in it."