Re: Securing workstations from IT guys

On Nov 27, 2007 3:05 PM, Liam Jewell <ljjewell@xxxxxxxxx> wrote:
Anybody who has physical access to the machine becomes a
vulnerability. Even if you encrypt files under an administrator
account on the local machine, simply resetting the password with a
program like Passware, will not disable the encryption. Then an
unauthorized user can log in to the admin account with a blank
password (or a password of their choosing) and have access to all
encrypted files.


This is not entirely true. If you reset or delete the password for an
account then that account will no longer be able to decrypt the files.
--
Mark Owen

Relevant Pages

  • Re: Resetting Machines Local Password
    ... account I was resetting the password on - nothing seem to happened as far as ... what happens if Administrator happens to be logged in when this ... > domain user account and the user was logged in at the time? ...
    (microsoft.public.scripting.vbscript)
  • Re: Single Account Being locked out frequently
    ... We tried resetting the password, ... workstations and it's the same for that account everywhere. ... code is in the error data). ... I personally prefer to disable account lockout, ...
    (microsoft.public.windows.server.sbs)
  • Re: Changing the Administrators password
    ... I logged into my Administrator account and went to the Control Panel ... I do have a third party program that I use to encrypt files tho. ... >> Is it safe for me to change the Administrator's (now named something ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Forgotten User Password
    ... Note that if this is XP Pro, ... decided to encrypt files or folders, changing the password from outside the ... account will almost certainly prevent you from ever decrypting that data. ... The first exception is where you designated a recovery agent, ...
    (microsoft.public.windowsxp.help_and_support)
  • Changing the Administrators password
    ... I can't encrypt files using FAT32 as can be done with the ... I do have a third party program that I use to encrypt files tho. ... Is it safe for me to change the Administrator's (now named something ... To do this I make my own account part of the ...
    (microsoft.public.windowsxp.security_admin)