Step #1: Create Allow User Lists Create a text file called /usr/local/etc/kdm.deny or /usr/local/etc/gdm.deny, e nter: # vi /usr/local/etc/gdm.

allow Add each username on a separate line. In this example, deny access to user tom, jerry, spike, tyke, butch etc: tom jerry spike tyke butch Save and close the file. You can to use the same file for kdm using ln command: # ln -s /usr/local/etc/gdm.allow /usr/local/etc/kdm.allow Any user name present in these file will no longer be able to login via GDM (GN OME) or KDM (KDE) systems. But, those users can still login using ssh or use su and/or sudo commands. Step #2: Restrict GDM User Login Edit /etc/pam.d/gdm, enter: # vi /etc/pam.d/gdm Append / modify line as follows: auth required pam_listfile.so onerr=fail item=user sense=allow file=/usr/local/ etc/gdm.allow Save and close the file. Step #3: Restrict KDM User Login Edit /etc/pam.d/kdm, enter: # vi /etc/pam.d/kdm Append / modify line as follows: auth required pam_listfile.so onerr=fail item=user sense=allow file=/usr/local/ etc/gdm.allow Save and close the file.

On many distros the 'single' or 'rescue' boot will still ask for a password. You can get around this by starting linux without starting initd, just launch a shell instead; and it's blindingly fast. 'e' to edit again, then end up at a distro, you the boot entry, select the kernel line and press 'e' type "init=/bin/bash", enter, press 'b' to boot it. You root prompt with / mounted read-only. (depending on the might need /bin/sh instead)

# mount / -o remount,rw # passwd <change your root password here> # mount / -o remount,ro <three-finger salute or hit the reset button> It's also useful for fixing up boot problems, if you're silly enough to have put commands in various init scripts that don't actually exit or daemonize...

you can reset the login shell using 2 easy ways.. just login to your xp machine run regedit using task manager or if the shell that you already have support "ru

n command" just run "regedit" then navigate to that key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon look for Shell, double click on it , and change the value from what ever it is to Explorer.exe exit regedit , reboot thats all , you should get your explorer as a default shell. or using group policy editor at run command type gpedit.msc and press ok then navigate to user configuration -> administrative templates-> system at the right pane you shall see "custom user interface" double click on it you can whether change the value to explorer.exe or just by disabling it will re vert back to explorer.exe. reboot and you system is back to explorer