[MOONLIGHT SONATA]

To All the Fellow Members,

What i need is a special type of batch file or a script file; the only purpose of the batch or script is to check for one or two particular strings in an already present report file generated by some program. The moment it finds string(s)in the reference file, it compares the string value with a value pre-embedded in the needed batch itself or the same value located in some other file. Based upon this cross-checking, the batch will take system-critical actions as its next task. If, the values compared are same, the batch will simply terminate itself. But, if the values mismatch, batch will act as a Frankenstein; it will terminate itself as well as any future operation scheduled after it.

The whole idea is linked to unattended installation CD, and my main goal is to implement some serious machine authentication standards. Yes, my need is related to protection of our UACD Projects from unauthorised copy, distribution and, even sale by those who get their hand into it only because of our generosity. After putting so much efforts, it hurts, severely.

I've the report file generated by a particular program; this is the standard. If anybody is ready to help me, i'll provide the report file to him. Microsoft, in collaboration with some OEMs, has implemented SLP(System Linked Pre- Installation) in their Windows XP CD, which entangles Installation from the CD to the System BIOS or Mainboard. If Mainboard is changed or the BIOS is updated, that Windows XP CD is gone! SLP is such a severe stopper against
copying.

Our protection method, as i imagined, is close to SLP type protection method implemented by Microsoft.

If anybody is ready to help me out, all effort by him will be self-rewarding, as his own UACD Project is protected thereby. For him, this much i can say and, Secure. For Sure.

Thanks, for such a long reading..

This post has been edited by MOONLIGHT SONATA: 10 July 2005 - 05:17 AM

[Achdine]

Quit expecting other people to do your work for you. If you're interested in implementing something like this, you should have done at least some research on it instead of just trying to take the easy way out. The information for the script you want to create could be found in even the most basic of guides. Google around for some help, or use the built-in .chm file, and there are plenty of command files on this webpage to use as examples (BTS' integration cmd files are nicely written and would make interesting browsing for you).

[sleepnmojo]

Quote

Whose is going to write it for me?

YOOOOOOOOOOU!!!!
Now what do I win?

[Shark007]

@Achdine - agreed.

@sleepnmojo - agreed.

@MOONLIGHT SONATA - Hope you enjoy your discovery of command files


Shark

[maxXPsoft]

XP Dos, Command-line reference A - Z

[MOONLIGHT SONATA]

@maxxpsoft,
Thanks, for your link. Hope, i can do some thing with it.

P.S. Today joined your forum! Nice Place for me to channelize bandwidth. Not posted anything today. Only downloaded your hard work. Busy with your Set up scheme. Lovely executable to execute.
Promise you to actively participate. Keep up your good job. Thanks.

[maxXPsoft]

@MOONLIGHT SONATA
Ask me anything over there and I'll answer more freely. I'm not that good at batch but do know it from the early day's. Using that help file does help though, although a few things are not right with it and those things you have to discover on your own. Like upper case lower case makes a difference occasionally. /F /f

[Martin Zugec]

I will join...

[Bâshrat the Sneaky]

Hmm... very interesting IMO. I had never heard of this 'SLP' mechanism before.

Count me in.

I'll help where I can.

(Though I may not have much time: summer job + DriverPacks + others = not much time...)

[Yzöwl]

Interesting idea, probably because I am very anti-piracy and love to mess with batch files.

Stick me on the list too…

[mockranger]

Did a little research on this a while ago. It's an interesting technology. Anyway, the short answer is that short of you being a large scale system builder, you're not gonna pull this off. The whole process looks something like this.....

1) System Builder creates a file that points to a specific BIOS location and matches a text string in that location.
2) The system Builder then signs this file with a verisign digital certificate.
3) Send file to Microsoft OEM System builder group who do some manipulatoin turning it into a 10+Meg file.
4) Microsoft countersigns the file with theit digital certificate and returns it to the system builder.
5) From this point it appears to be a little unclear, but it looks like you simply place the file in the $OEM$ structure which gets read as part of the install process assuming you are using the OEM build of the product. Corporate and Retail builds DO NOT look for the file.


There are a couple of caveats to using this tech. First, you can not install via winnt32.exe or setup because it implies an environment is alreayd in place and the tech only work in clean installs. to me this means if you do any pre-install steps, you're out of luck. It also doesn't ask for a product key because its been integrated into the file somehow by Microsoft. Personally this isn't a big deal to me since there is functionality to encrypt the key in the build process.

Most of this info comes from the OEM documentation and the MS System Builder newsgroups.

(Duh, hit reply too soon:P) The method is interesting but I'm not sure how you will via script or batch prevent breaking. Also most of the installation is subject to in-process manipulation via a keystroke that will open a CMD shell whcih allows you direct acccess to the installation.

This post has been edited by mockranger: 11 July 2005 - 01:58 PM

[Martin Zugec]

BTW SLP = System Locked Pre-Installation

[Martin Zugec]

BTW First problem - what about flashing bioses? It would remove SLP string from system

[mockranger]

Not really.


the technology is targeted towards OEMs not home enthusiasts. most OEMs use a taileored BIOS for their systems and have embedded their own text strings. I know this is the case with Gateway, Dell, and HP. When the OEM builds the BIOS they just leave the key string in the table at the same position.

[MOONLIGHT SONATA]

@mockranger

Very very serious observations posted by you. Priceless, infact.

in this context, i've someyhing to say further.

Microsoft takes the view that if the computer has a system-locked OEM version and you upgrade the computer's motherboard, you have a new computer and you are required to buy a new licence for Windows XP.

There is an area of dispute if the computer's original motherboard gives up the ghost. If it is replaced with one that is as similar as possible to the original board (is of the same make and model), the user should be all right.

The position depends on how the OEM copy of Windows XP was originally activated...

Many OEM copies installed by the major manufacturers (Dell, HP, Packard Bell, etc.) use a system called System Locked Pre-Installation (SLP) that doesn't match any hardware on start-up. It looks for a special signature in the BIOS setup program instead.

If the OEM computer's installation Windows XP has a file called oembios.bin, then it has SLP-activated OEM copy. Microsoft is unclear on what happens if the user has to replace the motherboard in this case, but it seems as if a new Product Activation will be granted if the replacement motherboard is made by the same manufacturer,and is preferably the same model.

Having said that couldn't we start with little labour with respect to what is within any OEMs' oembios.bin? just an idea. Hope you think and respond.

[MadBoy]

Isnt it just activation that Microsoft implemented a while ago, and so all OEM software must be activated by phone or internet. As i play a lot with notebooks and other pc's when you replace motherboard (same model/same type) all you have to do is replace bios also (leaving old bios in new mainboard) and everything should be fine. Else you have to call microsoft and enter zilion of codes that they give (including 2 phone calls that you have to make, you can't just make one ;p). I think i don't understand what you want to achieve with your batch script that you're trying to make? Maybe someone wanna explain it to me?

[riverrm]

Pre-activation" of Windows XP by the OEMs will be done in one of two different ways depending on the OEM's own configuration options and choices. Some OEMs may protect Windows XP using a mechanism which locks the installation to OEM-specified BIOS information in the PC. This technology works very similar to existing technologies that many OEMs have used over the years with the CDs they ship to reinstall Windows on these computers. We expanded and integrated the existing OEM CD BIOS locking mechanism with product activation, and call this method of protection "System Locked Pre-installation," or SLP.

Successfully implemented, SLP uses information stored in an OEM PC's BIOS to protect the installation from casual piracy. No communication by the end customer to Microsoft is required and no hardware hash is created or necessary. At boot, Windows XP compares the PC's BIOS to the SLP information. If it matches, no activation is required.

Every single piece of hardware could be changed on a PC with SLP and no reactivation would be required — even the motherboard could be replaced as long as the replacement motherboard was original equipment manufactured by the OEM and retained the proper BIOS. In the unlikely scenario that the BIOS information does not match, the PC would need to be activated within 30 days by contacting the Microsoft activation center via the Internet or telephone call — just as in a retail scenario.

http://www.microsoft.com/technet/prodtechn...te/xpactiv.mspx

[MOONLIGHT SONATA]

@riverrm,
thanx for your valuable comments. I've already information that the way Microsoft+OEM+BIOS vendor worked hand-in-glove to implement SLP has not changed from what was their method 3-yrs back. Purpose of SLP is already defeated in a corner of the world. My problem is that i'm not getting hand to the beautiful article written by Peter Siering in highly acclaimed German Computer Magazine C't wayback in 2002! that article is even not available for online reading now. I ask my German Mates here to arrange a translated to english copy of this article as either post here or as a mail to my mailbox. Here's the information about that exemplary article on C't:

version: 20/2002 Page:212
Peter Siering : "Windows XP freizügig"

In the article the Author states :
******************************
Windows XP without hardware chain
******************************
The rumor keeps itself persistent that a OEM version of Windows XP is executable only on the associated PC. Though M$ wants us to believe that it is impossible to make this cd´s run on other computers, it is usually very simple to release XP from the hardware chains.

This post has been edited by MOONLIGHT SONATA: 23 July 2005 - 11:59 AM

[riverrm]

post it in german, im fluent

[mediapla]

If you must change your Motherboard and you have no warranty on this board (and cant get a board of your manufacturer) you must activate your version, because the XP Versions are Bios bundled.
Normally this is no problem, to activate a SLP Version like a normal Retail/OEM Version over internet or telephon. But some people have fear to do that...why???!!!
But sometimes there is a solution...you can add/change a bios string to use your XP version without activation. At the monent this is possible with the most AWARD/AMI Bios versions. (I dont found a solution with Phoenix Versions.)