Re: Block Local Login

From: S. Pidgorny (slavickp_at_yahoo.com)
Date: 10/30/03


Date: Thu, 30 Oct 2003 21:01:06 +1100

There are hacks: for example, you can disable keyboard and mouse, bu
changing value of the Start key (DWORD) from 1 to 4 under
HKLM\System\CCS\Services\Kbcclass (or Mouclass).

There are null display drivers in the Server Appliance Kit.

But remember: whoever has physical access to the server, can have it. If you
are co-locating your server in a place that is available via 1-800,
"we-will-rock-you-forever" number, make sure there are some contractual
obligations to limit access to the server to you or authorised (by yourself)
staff. Qantas recently had an accident when big server (200kg) was stolen
from a datacentre.

-- 
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-
"Jeremy" <Nospam@nospam.com> wrote in message
news:eSHomblnDHA.1948@TK2MSFTNGP12.phx.gbl...
> What registry key could I change to prevent local login on a w2k server.
We
> have remote administration turned on so we can control the server and make
> changes remotely.  But we still get the occasional user who can go up to
the
> server and logon locally.
>
> -- 
>
>
> Jeremy Kettelhohn
>
>


Relevant Pages

  • [Full-Disclosure] RE: Disabling Cached Logon Credentials
    ... Even with physical access you want to do what you have ... physical server only to change the admin password and do some hack (i.e. ... >Subject: Disabling Cached Logon Credentials ...
    (Full-Disclosure)
  • Re: Automatic Logon: Recovery Console Password
    ... "If a bad guy has unrestricted physical access to your computer, ... not your computer anymore" ... Without some special software & hardware on the server, ... I would have been unable to use the "Recovery Console" ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: Disabling Cached Logon Credentials
    ... Even with physical access you want to do what you have to, ... Subject: Disabling Cached Logon Credentials ... Disabling cached logon credentials is on virtually every server ...
    (Focus-Microsoft)
  • [Full-Disclosure] RE: Disabling Cached Logon Credentials
    ... Even with physical access you want to do what you have to, ... Subject: Disabling Cached Logon Credentials ... Disabling cached logon credentials is on virtually every server ...
    (Full-Disclosure)
  • Re: Help on Administrative pasword security
    ... For those resetting tools to work, user would need a physical access to the ... protect physical access to your servers. ... password I can simply use to e.g. install key logger on your server so that ...
    (microsoft.public.win2000.security)