Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

How do I set up a windows account, so that Windows will accept any password to login. I want to create the illusion of security for the user. Where the user believes that there account is secure and has a password, when it actually has none. I am obviously operating under the assumption that I am an Administrator on the computer in question. How would I go about doing this?

share|improve this question
1  
Wow, what a unique and malicious question! I don't think you could do it as you described without really getting into Windows and making a mess of things. But, I think you could make a fake Windows logon, so its the illusion of logging on... –  AthomSfere Sep 1 '13 at 18:04
1  
@barlop the product certainly could be malicious, not necessarily that the intent of the OP is. And all it takes to get a good password is someone mistyping theirs once... I did upvote the question too, because although its a security issue, its a good question for both the concept and the vulnerabilities of users it could expose. –  AthomSfere Sep 1 '13 at 18:45
3  
This ranges from misguided through malicious to ethically and perhaps legally wrong. Don't do it. –  Rory Alsop Sep 1 '13 at 19:23
1  
@AthomSfere but he isn't asking how to steal passwords when a user logs in / how to set up a replacement log in screen, (and i'm not sure that that the latter has even been done). He's asking along the lines of having a username where any password works. I suppose if one could replace the entire user account system /log in screen, then it would allow what he wants and could steal passwords that way, but I don't think that has ever been done, and really to get a password there's l0ftcrack or peter nordahl's offline nt.., but he wasn't asking about getting a password. –  barlop Sep 1 '13 at 20:50
1  
@barlop but with he is asking, getting an un-hashed password is an arguably natural evolution of one of the likely vectors to hack windows the way he is asking... –  AthomSfere Sep 2 '13 at 0:38

1 Answer 1

For Vista and newer you would need to write your own Credential Provider to be shown at the login screen along side the normal login.

For XP and older you need to write a new GINA interface, this in theory could replace the old login entirely (and that is one of the reasons why Vista and newer no longer uses GINA).

Any advice on how to do either of those is off topic for Super User, you would need to work on it on your own and when you get stuck go ask on Stack Overflow about the specific issue you are having creating your own implementation.

share|improve this answer
    
I'm sorry, but am I the only one who giggles a little when I read that as 'gina interface? XD –  Moses Sep 4 '13 at 0:39

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.