Re: Encrypting Administrator's profile
- From: VanguardLH <V@xxxxxxxxx>
- Date: Fri, 9 Jan 2009 20:22:30 -0600
Kirsten wrote:
Is there any way to encrypt (EFS or similar) the entire administrator's
profile folder (C:\Documents and Settings\Administrator) so as to prevent a
user from login in to the computer if he changes the password with a dos
utility? (CIA Commander for example).
There's no point in having domain policies if the user can login as the
administrator and do whetever he wants with the computer!
What else do you suggest? (please don't say "put a bios password" or "forbid
physical access to the computer")
Thanks a lot!
NOTE: Kirsten chose to shotgun his post to unrelated newsgroups.
Windows XP is not a server nor is it Vista. So the following newsgroups
were removed from my reply:
microsoft.public.windows.server.security
microsoft.public.windows.vista.security
If you physically allow others to share a host, they can eventually
figure out how to steal or break your login passwords. Start looking
into whole-disk or partition encryption products. I think TrueCrypt can
encrypt a partition, like the one with the OS. Or you could just use a
BIOS-enabled password and lock the case so they can't get inside to
clear the CMOS data.
.
- Prev by Date: Re: Shutdown.exe doesn't run due to lack of privileges
- Next by Date: Trouble with recycle bin on XP with multiple users
- Previous by thread: Re: Shutdown.exe doesn't run due to lack of privileges
- Next by thread: Trouble with recycle bin on XP with multiple users
- Index(es):
Relevant Pages
|