Re: keep others out of my computer

From: S. Pidgorny [MVP] (slavickp@yahoo.com)
Date: 10/12/02 

From: "S. Pidgorny [MVP]" <slavickp@yahoo.com>
Date: Sat, 12 Oct 2002 22:48:16 +1000

We have such setup on some systems. Having the fact we're encrypting drives
before the're populated with data and volumes are less than 1GB, the process
takes about an hour. 

--
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-
"Pez Mohr" <boredMDer74@msn.com> wrote in message
news:eU5m75acCHA.1372@tkmsftngp12...
> Heh...nice...
> Wonder how long it would take to set up that config? Especially the whole
> encrypting stage..
>
> --
> Pez Mohr
> boredMDer74@msn.com
> Aspiring BOFH
>
>
> "NeoSadist" <neos@dist> wrote in message
> news:uqee0ujppqt486@corp.supernews.com...
> >
> > "Debbie" <debbiek92@attbi.com> wrote in message
> > news:1d7a01c27136$5bc8e3a0$36ef2ecf@tkmsftngxa12...
> > > Is there a program or some setting that whenever my
> > > computer boots up, the user MUST use a password before
> > > they can get to my desktop?  The only passwords I can find
> > > are the network passwords & all you have to do is click
> > > cancel & you can bypass the password & still get on my
> > > desktop & all my files.
> > >
> > > This would be much easier than trying to set passwords on
> > > each of my programs and some of my programs don't have
> > > that capability so someone could get into them.
> > >
> > > Thanks
> >
> >
> > This is what I would do:
> > I would use a BIOS password.
> > I would use SYSKEY to force password before log-in.
> > I would also make control-alt-delete mandatory for login.
> > I would also tell windows not to display last user name.
> > I would also use a cryptic password for Admin.
> > Admin would be the only user, and would be renamed.
> > Guest account would be disabled, with no password change.
> > I would then select all files on hard drive (one group), and change the
> > permissions from Everyone to Admin account and Administrators, leaving
any
> > other system or other default permissions alone.  Be sure you give all
> > admins full access.  Then I would create a backup admin account.
> > I would then encrypt my entire hard drive (ignoring files that cannot be
> > encrypted).
> > If this sounds weird, just pick up a copy of "Hardening Windows 2000" by
> > Philip Cox over at www.sans.org
> >
> >
>
>

Relevant Pages

  • Re: keep others out of my computer
    ... encrypting stage.. ... > Admin would be the only user, ... > other system or other default permissions alone. ... Then I would create a backup admin account. ...
    (microsoft.public.win2000.security)
  • Re: Protecting sensitive files on a Windows file server
    ... The files will be encrypted on your file server but since the employee will have a key that is able to decrypt the files, he/she can then do whatever he wants with the file (e.g. copy to USB drive, burn to CD, etc.). ... If a user copies an encrypted file from the encrypted folder to a non-encrypted folder, the file will be saved unencrypted. ... I forgot to mention in my previous e-mail not to forget about encrypting the communication between the client's workstation and the file server using, for example, IPSec communications. ... Group Policies can disable USB drives, you can remove CD-R/RW drives, disable all attachments on your mail server, etc. ...
    (Security-Basics)
  • Re: Map network drive for user using VB/ASP.NET
    ... you use kerberos and an admin logs on. ... things like a network path, username, etc., and the app would use these ... values in a VB script which could then perform the function (as if we ... From my understanding of mapped network drives, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Disk over writing software
    ... modern drives "auto-fix". ... on the block to a "spare" block reserved for this ... That's why I prefer encrypting my hard-disk instead of being concerned ... For SMART drives you've got smart tools, ...
    (comp.os.linux.security)
  • Re: Ghost for server
    ... must have for each admin. ... I would recommend these image products for server systems: ... can even map your images as drives. ... It comes with a DOS based restore like any professional ...
    (microsoft.public.windows.server.general)