Enforcing Network Login via POLEDIT

This procedure is more detailed than actually required, because I use it also as an example on usage of the "System Policy Editor" ( POLEDIT ) on the local Registry and on downloading a profile from the Network server.

When a Windows95/98 system is configured for Login to a Novell Netware server or Microsoft NT-server, users have the option to select in the Login-Window the button "Cancel":

That will NOT connect them to the Network server, but still allows them access to the local Windows95/98 system. Using POLEDIT, users can be forced now to connect to the network.

This procedure to enforcing Network-Login works only with Network-servers supporting a User-database (like: Novell-Netware or Microsoft Windows NT-server) Do NOT try this on a PC-to-PC (Peer-to-Peer) network!

1) Using POLEDIT on the local Registry

Start up POLEDIT, select from the Menu: File / Open Registry:

It displays the 2 parts of the Registry:
- USER.DAT as "Local user"
- SYSTEM.DAT as "Local Computer"
In this example, we double-click on "Local Computer":

To enforce the Login to the Network, open the key: "Network",
then "Logon" and put a checkmark on:
"Require Validation by Network for Windows Access"

now, save your modification back to the local Registry:

When a user now selects the button "Cancel" in the Login window, he will be presented the following message and then presented again with the Login window:


Warning: This is not fully securing the local Windows95/98 system!
To gain access to the local data, it is still possible to reboot the system, display the Boot-menu (pressing F8 for Win95) , to select:
"Command prompt Only" to get the DOS-7 prompt ("C:>") and then view/copy files on the disk!
If you need a strong security: Use Windows NT with a disk in NTFS format!

But on a large network, it is a lot of work to go around and to edit on all systems the Registry. Solution 2 results to the same, but with much less efforts.

2) Using POLEDIT to download a profile from the server
On the network server, a file (called "CONFIG.POL") is stored with UPDATE information, which is loaded into the local Registry during the Network Login process (updating the Registry):
Server enforced System Policies (POLEDIT)

About Johannes Helmig

Johannes Helmig is the Director of Technical Knowledge Management at Gerber Technology, based in Brussels/Belgium. In this Technical Support position, one part of his responsibilities is to keep the technical personal up-to-date on Operating systems, including Networking. Johannes holds a Ph.D. in Mechanical Engineering from the Technical University (RWTH) in Aachen/Germany. Johannes runs WoWN, a website dedicated to Microsoft Windows Networking. www.wown.com

Share this article

Receive all the latest articles by email!

Get all articles delivered directly to your mailbox as and when they are released on WindowSecurity.com! Choose between receiving instant updates with the Real-Time Article Update, or a monthly summary with the Monthly Article Update.



Receive all the latest articles by email!

Receive Real-Time & Monthly WindowSecurity.com article updates in your mailbox. Enter your email below!
Click for Real-Time sample & Monthly sample

Become a WindowSecurity.com member!

Discuss your security issues with thousands of other network security experts. Click here to join!

Community Area

Log in | Register

Solution Center

Readers' Choice

Which is your preferred VPN solution?