I Forgot My Deep Freeze Password

0 views
Skip to first unread message

Pavan Outlaw

unread,
Aug 5, 2024, 12:14:35 PM8/5/24
to begfihandca
1After DU loads select your hard drive (this is the entry with the mfgr.'s ID and size) from the left side list. Note the SMART status of the drive in DU's status area. If it does not say "Verified" then the drive is failing or has failed and will need replacing. SMART info will not be reported on external drives. Otherwise, click on the Partition tab in the DU main window.

2. Under the Volume Scheme heading set the number of partitions from the drop down menu to one. Click on the Options button, set the partition scheme to GUID then click on the OK button. Set the format type to Mac OS Extended (Journaled.) Click on the Partition button and wait until the process has completed.


osx lion 10.7.3, no help from deep freeze tech support, u think a clean install of mountain lion from a bootable disk would work? ive tried to update to mountain lion but everytime i restart my computer it goes back to the previous default settings (deep freeze doing what is supposed to do)


I believe that if you re-partition and erase the drive first, then install Mountain Lion that would rid the computer of the Faronics software. But I don't know this from experience. I've tried the Faronics product but never had your issue.


Deep Freeze is known professional computer restore software that can be used to restore the operating system back to the original configuration automatically and protect your system from being damaged or altered. After installation, you can set a password to protect Windows system. But if you forgot this password you set when you need to login in to modify something, what could you do?


In this post, we will show you how to remove deep freeze password and uninstall it without using any third-party Deep Freeze password remover.Before you attempt to remove password of Deep Freeze, you have to know what you'll need:


If you failed to reboot your operating system due to forgetting the login password when attempting to remove Deep Freeze password, you can still unlock it with the help of Windows Password Key, the world's leading Windows password recovery tool, which help you reset, recover and remove lost or forgotten administrator and user passwords on any Windows 10/8.1/8/7/XP/Vista system without reformatting or reinstalling your system.


First, they made an attempt to stop Meltdown from generating correct One Time Passwords (OTP). While doing so, they added a new vulnerability - similar to the one that Meltdown used to obtain password for Deep Freeze Standard version 7.x and older.

Second, they added a licensing mechanism that requires each workstation to be activated. While doing so, they created a new local privilege escalation vulnerability.


The problem is in data exchange between driver and the UI component. It's done using DeviceIoControl calls and data are encrypted using changing XOR key. However, the overall communication protocol is badly designed.


So, let's start with the Deep Freeze Standard versions 5.x to 7.x. Communication between UI (frzstate2k.exe) and the driver goes like this:



Obviously, it's easy to extract password from the information provided by driver. That's what Meltdown originally did.


Deep Freeze Enterprise is a different story:



This communication makes sense. But all the information necessary to generate OTP was present in dfserv.exe and other executables. So, Meltdown didn't even have to communicate with the driver.


But in the latest version (v8.31) the information to generate OTP is not present in dfserv.exe or other executables. However, Faronics added a new feature to the driver:



Where have I seen this design before? ? So, I updated Meltdown to obtain information necessary for OTP generation from DeepFreeze driver. Easy as pie.


I get this question a lot lately. People who see Meltdown ask that. IT managers who bought DeepFreeze ask that. And even some reverser friends have asked me that. But I'd rather not say anything and let the facts speak for themselves.


Hello. I have deep freeze 8.20.020.4589, and i had tried your meltdown and it doesnt work. the message is DeviceIoControl reports failure (1), please help me, i need to close deep freeze.

thanks in advance. ( and excuss my english)


Asking others to talk in English is disrespectful, others should not have to accommodate to English speakers, rather, it should be the opposite. Since English is viewed as the "dominant language", it is important to recognize your privilege.


You are a genius thank you very much, you could perform the meltdown for the version of deep freeze 8.30, since when I use your application of my sale an error saying: "This DeepFreeze version is NOT supported"

thanks.


Hey,could a forgetfull fellow get any help with deepfreeze 8.51.220.5387. I manage a school, and we have 30 laptops with deepfreeze, the old it guy took off and we would like to reinstall windows and get ssd-s in them but we dont know the passwords....:( I tried meltdown but it doesent work, i knew it wouldnt but i hoped ? Will you update meltdown to support newer deepfreeze installs or nope. thnx


Hey there,

1) if you have a valid license, it should be possible to get a support from Faronics directly.

2) if you've lost your password and just want to change it, booting from any Linux live CD/USB should be enough. IIRC, deleting persi0.sys removes DeepFreeze settings - but I will not give any guarantees or support for that. Try at your own risk.

3) if you're putting in SSDs and a new system on them, you're looking at a complete reinstall anyway. There is no need to disable DeepFreeze for that.


Thanks for the reply.

1. yes we have a valid license, but it will be an ear sweating phone call with them and i wanted and i hoped for a shorter route.

2. thank you, good to know ?

3. Finally we cloned them with deepfreeze in frozen state without a problem...but still there is the problem with the passwords....

Anyhow thanks for the reply, and the help ?


Hey, maybe you don't know why I am going to use this tool at first, because my BIOS password lock, and it cannot be reset, then I can't enter the PE, which means I can't install Windows on their own, as to delete the sys files, cannot be started directly, but I think you can plan to add 8.51 support thank you very much! If not, please recommend one that in the case of don't know the password and in the frozen state to remove or uninstall DeepFreeze method or software (I really need it) at the same time I also have their own idea: if I can enter the PE, so you only need to develop a can delete all DeepFreeze installation time is written on the registration list the procedure can achieve the goal of the disabled.


Hi, R/Kao, I've deep freezer V 8.61 installed (don't wanna uninstall) i forgot my password

I've need any tool like meltdown for password recovery. i'll be glad if you can do anything for

my issue. Thanks


No. As I've explained several times, the point of Meltdown was to demonstrate the issues with Faronics product design. Faronics have fixed the biggest issues with their product, and it's more or less OK now.


As I have 11 other systems in the computer centre with Deep Freeze already installed and my issue was not that I forgot the password, which if you are wondering, can also be by passed the same way, just create a new Deep Freeze install on another system with the pass you want, then copy the files. So in my case I just went to a system that has Deep Freeze installed and booted it in thawed mode. But here is the kicker that NO ONE explains, maybe its because they think EVERYONE in the world can read minds, I dunno, but when you try to copy the Persi0.sys file, it tells you that it is in use by the system, so moving, copying, or editing the file is impossible while in the Windows it is protecting. So here are the steps I took, to get the file off the working system on tot he permafrost system.


Steps 5 through 8 will obviously be different if you are running a non VHD system, and if you only have the one VHD or a stock system where the OS is on the physical drive, use the boot CD to gain access and copy the files over (If a VHD you will need to select and attach it first)


Things i've tried:

1. Using a preferred server for domain and set that same server for Time synchronisation

2. Set pass interval to 0 (this is recommended if you don't want it to check the machine password every 14 days with AD)

3. Set manual IP addresses then reverted back to DHCP (on that VLAN)

4. Cleared ALL DNS entries, cleared caches etc

5. Using a domain that does NOT end in .local

6. Disabled bonjour advertising services (to completely disable the .local issue even though I know I'm not using a .local domain)

7. Altered the mdns_timeout period in the file /System/Library/SystemConfiguration/IPMonitor.bundle/Contents/Info.plist (again i know this is for .local domain issues)

8. Tried Centrify Express just as a binding tool

9. Taken them ALL off the VLAN and back on after finding out it makes no difference.


Just as a side note does anybody know why Apple decided to remove the red dot (the traffic light indicating system thing)? I'm talking about the "Network Accounts are unavailable" red dot (Stays on until they do become available). In Mavericks its just a little pop-up flag that displays the same message but disappears instantly when the user starts to type username and obviously if they haven't waited long enough they get the infamous "shake" of the window.


Zahid, thanks for more hints on maintaining a healthy domain binding on a Mac. Our most common problem is lack of authentication, even though the binding is still good. Reboot is the simple fix, though it seems to be a time sync issue for us. "ntpdate -q timeservername" (or domainname) to see the time drift between the client and the domain shouldn't matter with less than 5 minutes of drift for the domain account. Authentication seems to be a lot touchier, though. Updating the time "fixes" it for us right away.

-Nate

3a8082e126
Reply all
Reply to author
Forward
0 new messages