TopBanana

Long shot, but I might as well try!

I need to installed a checked version of kerberos.dll to enable logging. Normally I'd do this in safe mode, but I can't log on to the box... can you schedule a DLL to be replaced somehow on the next boot-up?

David_Wallis

I doubt you could do it with a kerberos dll

Use something like ERD commander or Knoppix and boot from a cd.

David

thundertiger

cant you use regsvr32? or am i being a thicko?

BB

roblane

safemode is the only "safe" way to do this - you can try batch files which rename the files in system32 and dllcache at the saem time time but they're mostly unsuccessful and often you still need to reboot the box to get the dll loaded if its a system process you're investigating.

If you have a probelm withlocal logon but perms to be able to access the c: drive remotely AND to reboot the box remotely you can do all neccessary work from another machine

1) access boot.ini on target machine over the lan and add a new line:

e.g. copy the existing boot lien and add the the following switches:

/safeboot:network /sos /bootlog /noguiboot

[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Micro soft Windows XP Professional" /fastdetect /NoExecute=OptIn

becomes:

[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Micro soft Windows XP Professional" /safeboot:network /sos /bootlog /noguiboot
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Micro soft Windows XP Professional" /fastdetect /NoExecute=OptIn

Save the boot.ini and disconnect.

2) Trigger remote restart of the target e.g.

shutdown -m \\target -r

3) Once the box has restarted connect to it over the net and rename kerberos.dll in system32. Copy in the checked one.

Don't replace the one in dllcache.

Set the appropriate kerb reg keys.

Edit the boot.ini again so that the normal boot entry is at the top of the list.

restart the target machine as before..