Registry Hack

[jdolph]

Ok, I am on a Novell 4.12 network using the 3.1 client on a Windows 98 Operating
System. I have users unplugging their connection so they don't get a login prompt,
then connecting it so that they can abuse the internet(t-1 connection). I need
to load an SMS package that I have developed before Network services gets called, but
loading into the RUN key under HKLOCAL MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENT
VERSION\RUN loads the program after network services. Why is this a problem? Well,
to counter this activity, I have loaded two other registry keys([HKEY_LOCAL_MACHINE\Network\Logon]
"MustBeValidated"=dword:00000001) which forces them to get a Novell prompt as long
as the cable is in, but when they pull it out...>>So, I added these two keys:>
Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\VxD\DHCP
Value name: ReleaseLeaseOnShutdown>Type: DWORD>Value data: 0x00000001 (1)
Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Shutdown
Value name: FastReboot>Type: STRING>Value data: 0 which release IP if they logically shutdown. The SMS package I created checks to
see if z:\public\nwadmin.exe is there(thus verifying network connectivity), if it
isn't, it deletes the key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\VxD\MSTCP

which will not let them have any iP services, if they do validate to the network,
it pastes this key back in. The only problem in the whole scenario is that if they
shutdown the box without a proper shutdown, the cached IP Address allows them to
access the internet. When they shutdown their session, the poor user after them
is broken(because the MSTCP key has been deleted and re-added, but after network
services has been read through the registry. >
My question then is this: Does anyone know where I could find the cached DHCP entries
so I can whack those during startup prior to network services starting up? Or does
anyone know how to load an exe prior to network services being called from the registry?

Thanks!

[jstolz]

Well, it's been a couplea days since your post and no nibbles... that's a pretty complicated question, and I'd say that would tax the abilities of most folks here, but...
have you considered:

1. Doing a search for a recognized cache value?
2. Other than going to the MS KB to see how you run an exe before the reg calls your netware services
3. Is the netware login script too late to re-establish the HKLM\...\VxD\MSTCP key?--or unless your users are too sophisticated, autoexec?

Hope something in there sparks a path forward for you...

Regards...