Re: Hacked Workstations

From: megascout29 (megascout29_at_discussions.microsoft.com)
Date: 02/25/05 

Date: Fri, 25 Feb 2005 14:53:02 -0800

It is a private school. The school makes tens of thousands of dollars for
every student that attends. So unless a student is causing the school to lose
money (causing tens of thousands of dollars in damage would make them
unprofitable for the school, but that kind of damage is unlikely) then there
is no way in hell that they will kick them out.

These students are not very smart. A few skript kiddiots showed everyone
else the few tricks mentioned to get the local admin password. So I was
thinking that maybe if I could somehow encrypt the System32 folder using EFS
or something then they at least wouldn't be able to boot off a Linux CD and
delete the SAM as the wouldn't be able to find the SAM on the encrypted drive.

Would that even work though? I don't know much about EFS.

>"Dave" wrote:

>
> "megascout29" <megascout29@discussions.microsoft.com> wrote in message
> news:A5453D39-5A91-4868-B22C-BDD540806F12@microsoft.com...
> > I work at a school where students have been booting off Linux CDs and
> > deleting the SAM and booting off NT password reset floppies to delete the
> > admin password.
> >
> > For reasons beyond my control we have to give the students the ability to
> > boot off of floppies and CDs.
> >
> > My question is how can we stop this from happening?
>
> you have a couple options. the hardest one to get implimented is to
> discipline anyone caught bypassing security... kick a few of them out of
> school and maybe the others will get the idea. or you could live with the
> fact that its going to happen and make sure that you have a quick way to
> restore the proper image to a hacked machine. maybe even boot from a
> network instead of the local hard drive. if you go this way you also
> probably want to segregate the student machines so they don't have access to
> anything important. basically if you are in a situation where you can't
> control physical access to the machines you can't stop anyone from doing
> basically anything they want.
>
>
>
>

Relevant Pages

  • Man, I was a BAD student!
    ... Cocopah Middle School). ... I was a bad student. ... I did okay in Mrs. Chamberlain's classroom throughout all of 4th grade. ... Then, in 5th grade, my teacher was Mrs. Bauer. ...
    (rec.sport.football.college)
  • Re: Hacked Workstations
    ... > It is a private school. ... So unless a student is causing the school to ... > delete the SAM as the wouldn't be able to find the SAM on the encrypted ... if you go this way you also>> probably want to segregate the student machines so they don't have access to>> anything important. ...
    (microsoft.public.win2000.security)
  • Forsyth tackles issue several ways (NC)
    ... a band instructor at East Forsyth High School. ... having an illegal sexual relationship with the student and was sentenced to ... the law that governs how school systems report abuse. ... students and intensified training for teachers. ...
    (rec.arts.marching.drumcorps)
  • Re: Hey Wendy!
    ... You are just another dumbass med school student. ... >>> called a college student since I well....graduated college. ... I know a lot of medical school dropouts. ...
    (rec.sport.football.college)
  • Re: Muslim Dog-Hatred
    ... Technical High School left the school in late April because he says he ... Hurd said a student threatened to kill his service dog named Emmitt. ...
    (soc.retirement)