Comment by ElFitz

Fellow high school students just loved me when, after giving up on ophcrack, I found out that on Windows XP, a limited account could simply escalate privileges by scheduling a command.

First installed some open source FPS on all computers. They got found and removed, and we all got moved to guest accounts.

I then found something called DreampackPL. Just pop in the CD, boot on it, replace the pinball game with their executable, reboot. And voilà, access to everything. Just remember to put the pinball back afterwards.

That’s when the BIOS got password protected.

My next step? Opening the machines up to move a jumper. Do everything all over again, but this time on a hidden windows account.

The IT admin was a student’s parent. Just spent years making the poor guy run in circles before the school administration finally gave up.