Re: Windows logon security.

From: null (null_at_planetzero.com)
Date: 09/28/05 

Date: Wed, 28 Sep 2005 09:45:00 -0400

D.Currie wrote:

> Bios passwords are only useful if no one has unrestricted access to the
> computer and/or those who do have access aren't very technically minded.
> Clearing the cmos clears the password, and if someone can spend enough time
> with the computer to open the case, it only takes a few minutes to clear the
> cmos.
>
> If you know that no one's going to be able to open the case or know how to
> clear the cmos, this is a good idea, though.
>
> Encryption is good as long as you take the precautions to make sure you can
> decrypt your files, no matter what. A lost of people post here after they've
> lost encrypted files. And, if someone manages to log on as you, like by
> guessing your password or getting to your computer after you've used it and
> you haven't logged off, they have access to those files.
>
> What works best really depends on how you use your computer and who you're
> trying to keep out.
>

Well said, but I'd like to add that there is software freely available
that can be used to change *any* user's password so an unauthorized user
could still login as another user and access encrypted files (assuming
that another password wasn't required to unencrypt them). 

-- 
The reader should exercise normal caution and backup the Registry and 
data files regularly, and especially before making any changes to their 
PC, as well as performing regular virus and spyware scans. I am not 
liable for problems or mishaps that occur from the reader using advice 
posted here. No warranty, express or implied, is given with the posting 
of this message.