356 lines
29 KiB
Reg
356 lines
29 KiB
Reg
Windows Registry Editor Version 5.00
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
|
||
"AutoRestartShell"=dword:00000001
|
||
"DefaultDomainName"="APPEL-TC"
|
||
"DefaultUserName"="User"
|
||
"LegalNoticeCaption"=""
|
||
"LegalNoticeText"=""
|
||
"PowerdownAfterShutdown"="0"
|
||
"ReportBootOk"="1"
|
||
"Shell"="cmd /c start /d C:\\Programme\\System\\ThinClient /min ThinClient.cmd 192.168.112.14 192.168.0.2 192.168.0.3"
|
||
"ShutdownWithoutLogon"="0"
|
||
"System"=""
|
||
"Userinit"="C:\\WINXP\\system32\\userinit.exe,"
|
||
"VmApplet"="rundll32 shell32,Control_RunDLL \"sysdm.cpl\""
|
||
"SfcQuota"=dword:ffffffff
|
||
"allocatecdroms"="0"
|
||
"allocatedasd"="0"
|
||
"allocatefloppies"="0"
|
||
"cachedlogonscount"="10"
|
||
"forceunlocklogon"=dword:00000000
|
||
"passwordexpirywarning"=dword:0000000e
|
||
"scremoveoption"="0"
|
||
"AllowMultipleTSSessions"=dword:00000001
|
||
"UIHost"=hex(2):6c,00,6f,00,67,00,6f,00,6e,00,75,00,69,00,2e,00,65,00,78,00,65,\
|
||
00,00,00
|
||
"LogonType"=dword:00000000
|
||
"Background"="0 0 0"
|
||
"DebugServerCommand"="no"
|
||
"SFCDisable"=dword:00000000
|
||
"WinStationsDisabled"="0"
|
||
"HibernationPreviouslyEnabled"=dword:00000001
|
||
"ShowLogonOptions"=dword:00000000
|
||
"AltDefaultUserName"="Administrator"
|
||
"AltDefaultDomainName"="appel-TC18"
|
||
"DefaultPassword"="remoteappel"
|
||
"AutoAdminLogon"="1"
|
||
"temp"="cmd /c start \"ThinClient\" /d C:\\Programme\\System\\ThinClient /min ThinClient.cmd 192.168.112.14 "
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions]
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}]
|
||
@="Drahtlos"
|
||
"ProcessGroupPolicy"="ProcessWIRELESSPolicy"
|
||
"DllName"=hex(2):67,00,70,00,74,00,65,00,78,00,74,00,2e,00,64,00,6c,00,6c,00,\
|
||
00,00
|
||
"NoUserPolicy"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{25537BA6-77A8-11D2-9B6C-0000F8080861}]
|
||
@="Folder Redirection"
|
||
"ProcessGroupPolicyEx"="ProcessGroupPolicyEx"
|
||
"DllName"=hex(2):66,00,64,00,65,00,70,00,6c,00,6f,00,79,00,2e,00,64,00,6c,00,\
|
||
6c,00,00,00
|
||
"NoMachinePolicy"=dword:00000001
|
||
"NoSlowLink"=dword:00000001
|
||
"PerUserLocalSettings"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000000
|
||
"NoBackgroundPolicy"=dword:00000000
|
||
"GenerateGroupPolicy"="GenerateGroupPolicy"
|
||
"EventSources"=hex(7):28,00,46,00,6f,00,6c,00,64,00,65,00,72,00,20,00,52,00,65,\
|
||
00,64,00,69,00,72,00,65,00,63,00,74,00,69,00,6f,00,6e,00,2c,00,41,00,70,00,\
|
||
70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,00,6e,00,29,00,00,00,00,00
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}]
|
||
@="Microsoft-Datenträgerkontingent"
|
||
"NoMachinePolicy"=dword:00000000
|
||
"NoUserPolicy"=dword:00000001
|
||
"NoSlowLink"=dword:00000001
|
||
"NoBackgroundPolicy"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000001
|
||
"PerUserLocalSettings"=dword:00000000
|
||
"RequiresSuccessfulRegistry"=dword:00000001
|
||
"EnableAsynchronousProcessing"=dword:00000000
|
||
"DllName"=hex(2):64,00,73,00,6b,00,71,00,75,00,6f,00,74,00,61,00,2e,00,64,00,\
|
||
6c,00,6c,00,00,00
|
||
"ProcessGroupPolicy"="ProcessGroupPolicy"
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{426031c0-0b47-4852-b0ca-ac3d37bfcb39}]
|
||
@="QoS-Paketplaner"
|
||
"ProcessGroupPolicy"="ProcessPSCHEDPolicy"
|
||
"DllName"=hex(2):67,00,70,00,74,00,65,00,78,00,74,00,2e,00,64,00,6c,00,6c,00,\
|
||
00,00
|
||
"NoUserPolicy"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}]
|
||
@="Skripts"
|
||
"ProcessGroupPolicy"="ProcessScriptsGroupPolicy"
|
||
"ProcessGroupPolicyEx"="ProcessScriptsGroupPolicyEx"
|
||
"GenerateGroupPolicy"="GenerateScriptsGroupPolicy"
|
||
"DllName"=hex(2):67,00,70,00,74,00,65,00,78,00,74,00,2e,00,64,00,6c,00,6c,00,\
|
||
00,00
|
||
"NoSlowLink"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000001
|
||
"NotifyLinkTransition"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}]
|
||
@="Internet Explorer Zonemapping"
|
||
"DllName"="C:\\WINXP\\system32\\iedkcs32.dll"
|
||
"ProcessGroupPolicy"="ProcessGroupPolicyForZoneMap"
|
||
"NoGPOListChanges"=dword:00000001
|
||
"RequiresSucessfulRegistry"=dword:00000001
|
||
"DisplayName"="@C:\\WINXP\\system32\\iedkcs32.dll.mui,-3051"
|
||
"RequiresSuccessfulRegistry"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{7B849a69-220F-451E-B3FE-2CB811AF94AE}]
|
||
@="Internet Explorer User Accelerators"
|
||
"DisplayName"="@C:\\WINXP\\system32\\iedkcs32.dll.mui,-3051"
|
||
"DllName"="C:\\WINXP\\system32\\iedkcs32.dll"
|
||
"NoGPOListChanges"=dword:00000001
|
||
"ProcessGroupPolicy"="ProcessGroupPolicyForActivities"
|
||
"ProcessGroupPolicyEx"="ProcessGroupPolicyForActivitiesEx"
|
||
"RequiresSuccessfulRegistry"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}]
|
||
"ProcessGroupPolicy"="SceProcessSecurityPolicyGPO"
|
||
"GenerateGroupPolicy"="SceGenerateGroupPolicy"
|
||
"ExtensionRsopPlanningDebugLevel"=dword:00000001
|
||
"ProcessGroupPolicyEx"="SceProcessSecurityPolicyGPOEx"
|
||
"ExtensionDebugLevel"=dword:00000001
|
||
"DllName"=hex(2):73,00,63,00,65,00,63,00,6c,00,69,00,2e,00,64,00,6c,00,6c,00,\
|
||
00,00
|
||
@="Security"
|
||
"NoUserPolicy"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000001
|
||
"EnableAsynchronousProcessing"=dword:00000001
|
||
"MaxNoGPOListChangesInterval"=dword:000003c0
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}]
|
||
@="Internet Explorer Branding"
|
||
"DisplayName"="@C:\\WINXP\\system32\\iedkcs32.dll.mui,-3014"
|
||
"DllName"="C:\\WINXP\\system32\\iedkcs32.dll"
|
||
"GenerateGroupPolicy"="GenerateGroupPolicy"
|
||
"NoBackgroundPolicy"=dword:00000000
|
||
"NoGPOListChanges"=dword:00000001
|
||
"NoMachinePolicy"=dword:00000001
|
||
"NoSlowLink"=dword:00000001
|
||
"ProcessGroupPolicy"="ProcessGroupPolicy"
|
||
"ProcessGroupPolicyEx"="ProcessGroupPolicyEx"
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}]
|
||
"ProcessGroupPolicy"="SceProcessEFSRecoveryGPO"
|
||
"DllName"=hex(2):73,00,63,00,65,00,63,00,6c,00,69,00,2e,00,64,00,6c,00,6c,00,\
|
||
00,00
|
||
@="EFS recovery"
|
||
"NoUserPolicy"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000001
|
||
"RequiresSuccessfulRegistry"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}]
|
||
@="802.3 Group Policy"
|
||
"DisplayName"=hex(2):40,00,64,00,6f,00,74,00,33,00,67,00,70,00,63,00,6c,00,6e,\
|
||
00,74,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,31,00,30,00,30,00,00,00
|
||
"ProcessGroupPolicyEx"="ProcessLANPolicyEx"
|
||
"GenerateGroupPolicy"="GenerateLANPolicy"
|
||
"DllName"=hex(2):64,00,6f,00,74,00,33,00,67,00,70,00,63,00,6c,00,6e,00,74,00,\
|
||
2e,00,64,00,6c,00,6c,00,00,00
|
||
"NoUserPolicy"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{C631DF4C-088F-4156-B058-4375F0853CD8}]
|
||
@="Microsoft Offline Files"
|
||
"DllName"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
|
||
74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,63,\
|
||
00,73,00,63,00,75,00,69,00,2e,00,64,00,6c,00,6c,00,00,00
|
||
"EnableAsynchronousProcessing"=dword:00000000
|
||
"NoBackgroundPolicy"=dword:00000000
|
||
"NoGPOListChanges"=dword:00000000
|
||
"NoMachinePolicy"=dword:00000000
|
||
"NoSlowLink"=dword:00000000
|
||
"NoUserPolicy"=dword:00000001
|
||
"PerUserLocalSettings"=dword:00000000
|
||
"ProcessGroupPolicy"="ProcessGroupPolicy"
|
||
"RequiresSuccessfulRegistry"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}]
|
||
@="Softwareinstallation"
|
||
"DllName"=hex(2):61,00,70,00,70,00,6d,00,67,00,6d,00,74,00,73,00,2e,00,64,00,\
|
||
6c,00,6c,00,00,00
|
||
"ProcessGroupPolicyEx"="ProcessGroupPolicyObjectsEx"
|
||
"GenerateGroupPolicy"="GenerateGroupPolicy"
|
||
"NoBackgroundPolicy"=dword:00000000
|
||
"RequiresSucessfulRegistry"=dword:00000000
|
||
"NoSlowLink"=dword:00000001
|
||
"PerUserLocalSettings"=dword:00000001
|
||
"EventSources"=hex(7):28,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,\
|
||
00,6f,00,6e,00,20,00,4d,00,61,00,6e,00,61,00,67,00,65,00,6d,00,65,00,6e,00,\
|
||
74,00,2c,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,00,6f,00,6e,\
|
||
00,29,00,00,00,28,00,4d,00,73,00,69,00,49,00,6e,00,73,00,74,00,61,00,6c,00,\
|
||
6c,00,65,00,72,00,2c,00,41,00,70,00,70,00,6c,00,69,00,63,00,61,00,74,00,69,\
|
||
00,6f,00,6e,00,29,00,00,00,00,00
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}]
|
||
@="Internet Explorer Machine Accelerators"
|
||
"DisplayName"="@C:\\WINXP\\system32\\iedkcs32.dll.mui,-3051"
|
||
"DllName"="C:\\WINXP\\system32\\iedkcs32.dll"
|
||
"NoGPOListChanges"=dword:00000001
|
||
"ProcessGroupPolicy"="ProcessGroupPolicyForActivities"
|
||
"ProcessGroupPolicyEx"="ProcessGroupPolicyForActivitiesEx"
|
||
"RequiresSuccessfulRegistry"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{e437bc1c-aa7d-11d2-a382-00c04f991e27}]
|
||
@="IP-Sicherheit"
|
||
"ProcessGroupPolicy"="ProcessIPSECPolicy"
|
||
"DllName"=hex(2):67,00,70,00,74,00,65,00,78,00,74,00,2e,00,64,00,6c,00,6c,00,\
|
||
00,00
|
||
"NoUserPolicy"=dword:00000001
|
||
"NoGPOListChanges"=dword:00000000
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
|
||
"Asynchronous"=dword:00000000
|
||
"Impersonate"=dword:00000000
|
||
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
|
||
6c,00,00,00
|
||
"Logoff"="ChainWlxLogoffEvent"
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
|
||
"Asynchronous"=dword:00000000
|
||
"Impersonate"=dword:00000000
|
||
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
|
||
6c,00,6c,00,00,00
|
||
"Logoff"="CryptnetWlxLogoffEvent"
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
|
||
"DLLName"="cscdll.dll"
|
||
"Logon"="WinlogonLogonEvent"
|
||
"Logoff"="WinlogonLogoffEvent"
|
||
"ScreenSaver"="WinlogonScreenSaverEvent"
|
||
"Startup"="WinlogonStartupEvent"
|
||
"Shutdown"="WinlogonShutdownEvent"
|
||
"StartShell"="WinlogonStartShellEvent"
|
||
"Impersonate"=dword:00000000
|
||
"Asynchronous"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
|
||
"Asynchronous"=dword:00000001
|
||
"DllName"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
|
||
74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,\
|
||
00,69,00,6d,00,73,00,6e,00,74,00,66,00,79,00,2e,00,64,00,6c,00,6c,00,00,00
|
||
"Startup"="WlDimsStartup"
|
||
"Shutdown"="WlDimsShutdown"
|
||
"Logon"="WlDimsLogon"
|
||
"Logoff"="WlDimsLogoff"
|
||
"StartShell"="WlDimsStartShell"
|
||
"Lock"="WlDimsLock"
|
||
"Unlock"="WlDimsUnlock"
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MRCNotify]
|
||
"DllName"="C:\\WINXP\\dwrcs\\DWRCWXL.dll"
|
||
"Startup"="DWStartupEvent"
|
||
"Shutdown"="DWShutdownEvent"
|
||
"Impersonate"=dword:00000000
|
||
"Asynchronous"=dword:00000000
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
|
||
"DLLName"="wlnotify.dll"
|
||
"Logon"="SCardStartCertProp"
|
||
"Logoff"="SCardStopCertProp"
|
||
"Lock"="SCardSuspendCertProp"
|
||
"Unlock"="SCardResumeCertProp"
|
||
"Enabled"=dword:00000001
|
||
"Impersonate"=dword:00000001
|
||
"Asynchronous"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
|
||
"Asynchronous"=dword:00000000
|
||
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
|
||
6c,00,6c,00,00,00
|
||
"Impersonate"=dword:00000000
|
||
"StartShell"="SchedStartShell"
|
||
"Logoff"="SchedEventLogOff"
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
|
||
"Logoff"="WLEventLogoff"
|
||
"Impersonate"=dword:00000000
|
||
"Asynchronous"=dword:00000001
|
||
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
|
||
6c,00,6c,00,00,00
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
|
||
"DLLName"="WlNotify.dll"
|
||
"Lock"="SensLockEvent"
|
||
"Logon"="SensLogonEvent"
|
||
"Logoff"="SensLogoffEvent"
|
||
"Safe"=dword:00000001
|
||
"MaxWait"=dword:00000258
|
||
"StartScreenSaver"="SensStartScreenSaverEvent"
|
||
"StopScreenSaver"="SensStopScreenSaverEvent"
|
||
"Startup"="SensStartupEvent"
|
||
"Shutdown"="SensShutdownEvent"
|
||
"StartShell"="SensStartShellEvent"
|
||
"PostShell"="SensPostShellEvent"
|
||
"Disconnect"="SensDisconnectEvent"
|
||
"Reconnect"="SensReconnectEvent"
|
||
"Unlock"="SensUnlockEvent"
|
||
"Impersonate"=dword:00000001
|
||
"Asynchronous"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
|
||
"Asynchronous"=dword:00000000
|
||
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
|
||
6c,00,6c,00,00,00
|
||
"Impersonate"=dword:00000000
|
||
"Logoff"="TSEventLogoff"
|
||
"Logon"="TSEventLogon"
|
||
"PostShell"="TSEventPostShell"
|
||
"Shutdown"="TSEventShutdown"
|
||
"StartShell"="TSEventStartShell"
|
||
"Startup"="TSEventStartup"
|
||
"MaxWait"=dword:00000258
|
||
"Reconnect"="TSEventReconnect"
|
||
"Disconnect"="TSEventDisconnect"
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
|
||
"Logon"="WLEventLogon"
|
||
"Logoff"="WLEventLogoff"
|
||
"Startup"="WLEventStartup"
|
||
"Shutdown"="WLEventShutdown"
|
||
"StartScreenSaver"="WLEventStartScreenSaver"
|
||
"StopScreenSaver"="WLEventStopScreenSaver"
|
||
"Lock"="WLEventLock"
|
||
"Unlock"="WLEventUnlock"
|
||
"StartShell"="WLEventStartShell"
|
||
"PostShell"="WLEventPostShell"
|
||
"Disconnect"="WLEventDisconnect"
|
||
"Reconnect"="WLEventReconnect"
|
||
"Impersonate"=dword:00000001
|
||
"Asynchronous"=dword:00000000
|
||
"SafeMode"=dword:00000000
|
||
"MaxWait"=dword:ffffffff
|
||
"DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67,00,6f,00,6e,00,2e,00,64,00,\
|
||
6c,00,6c,00,00,00
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
|
||
"DLLName"="wlnotify.dll"
|
||
"Logon"="RegisterTicketExpiredNotificationEvent"
|
||
"Logoff"="UnregisterTicketExpiredNotificationEvent"
|
||
"Impersonate"=dword:00000001
|
||
"Asynchronous"=dword:00000001
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts]
|
||
|
||
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]
|
||
"Hilfeassistent"=dword:00000000
|
||
"TsInternetUser"=dword:00000000
|
||
"SQLAgentCmdExec"=dword:00000000
|
||
"NetShowServices"=dword:00000000
|
||
"HelpAssistant"=dword:00000000
|
||
"IWAM_"=dword:00010000
|
||
"IUSR_"=dword:00010000
|
||
"VUSR_"=dword:00010000
|
||
|