Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Simple Question

  1. #1

    Simple Question

    Alright, on my home PC, running Windows XP Home, there were four accounts, all with admin privaledges. Recently, my mom was threatening to delete some music and stuff of mine cuz she thought it was screwing the computer up (yeah...), so I put a password ( a secure one made up of numbers and letters in a random order) on my account, and made all my files private from the other users. One day, I came home and found that not only did all the other accounts have passwords, but mine had been changed. I am really confused as to how this was accomplished. How was this done?
    Don\'t mistake lack of talent for genius.

  2. #2
    The Iceman Cometh
    Join Date
    Aug 2001
    Posts
    1,209
    Anyone with adminstrative rights has the ability to change the password for any and all others users, regardless of their status. Also, if I'm right (which I may not be), I think administrators can still access private files. If not, they can just change your password and log in under your account with the new password. Either way, it sounds like putting a password on your account set a precedent and probably upset someone in your family and they're trying to get back at you for it.

    AJ

  3. #3
    Senior Member
    Join Date
    Apr 2004
    Posts
    1,024
    I believe files that are made private can only be accesed by the account that created it's UID. That's why people have issues arise when they reinstall windows and recreate their account but they cannot access files. My guess is they logged on as you and messed up your stuff.
    [H]ard|OCP <--Best hardware/gaming news out there--|
    pwned.nl <--Gamers will love this one --|
    Light a man a fire and you\'ll keep him warm for a day, Light a man ON fire and you\'ll keep him warm the rest of his life.

  4. #4
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    As I understand it there is one master Administrator password. Other accounts can be given administration rights, but the master Administrator pasword takes precedence.

    I would imagine thay your mom has the master password?

    Now, you cannot use that to read other passwords, but you CAN use it to change them, so all that happened is the master Administrator password was used to change your password, then all your stuff could be accessed using that.

    That is why your password changed.

    Well, that's my understanding of how it works.

    Cheers

  5. #5
    Senior Member
    Join Date
    Apr 2004
    Posts
    1,024
    The master admin account does not take complete control, I am quite sure it is just the same as any other admin account and they all have the same rights... Simply because you can delete that admin account... They wouldn't allow that if it had more rights... Would they?
    [H]ard|OCP <--Best hardware/gaming news out there--|
    pwned.nl <--Gamers will love this one --|
    Light a man a fire and you\'ll keep him warm for a day, Light a man ON fire and you\'ll keep him warm the rest of his life.

  6. #6
    The Iceman Cometh
    Join Date
    Aug 2001
    Posts
    1,209
    I did some basic tests with an extra XP system I had lying around and Admins (regardless of whether they are "Administrator" or another name) have complete control over the accounts, including other administrators. The_Grunt's right about the private files, but any administrator can take control of the files if they need to by changing the permissions (something I've done for people who reinstalled and were unable to access their stuff). But, as I said before, more than likely your mother (or someone else) changed your password. If they change the password, they can easily log in and change your files (or, as I suggested, they can simply take over your files from their account and do what they want with them). What I personally suggest familes to do is to set up one main admistrator account (i.e. "Parents") and then set up User accounts for all of the family members (mother, father, and each child). I realize as a son or daughter that's not what you want, but it's definitely the safest way to do it.

    AJ

  7. #7
    Macht Nicht Aus moxnix's Avatar
    Join Date
    May 2002
    Location
    Huson Mt.
    Posts
    1,752
    And if you want to keep something from any prying eyes the get a 3rd party encryption program and encrypt what you want to remain unseen.
    \"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, Champagne in one hand - strawberries in the other, body thoroughly used up, totally worn out and screaming WOO HOO - What a Ride!\"
    Author Unknown

  8. #8
    The Iceman Cometh
    Join Date
    Aug 2001
    Posts
    1,209
    And if you want to keep something from any prying eyes the get a 3rd party encryption program and encrypt what you want to remain unseen.
    Speaking of which, I have had awesome results with Kanguru Wizard (http://www.kanguru.com/kanguruwizard.html). That's what I'm currently using for the laptop I take with me when I visit clients or when I travel. I keep the key on my keychain and in order to access any of my documents, presentations, etc. I have to insert the key into the USB drive. I also have them for everyone else in my company who has laptops for the same reason. Works like a charm. Also, I haven't been able to crack it yet (and trust me, I've been trying) so I'm pretty comfortable with it. I find it easier and safer than software-based encryption like PGPdisk. But that's just me.

    AJ

  9. #9
    Macht Nicht Aus moxnix's Avatar
    Join Date
    May 2002
    Location
    Huson Mt.
    Posts
    1,752
    avdven, thats a great looking product.
    Do you know if they are available in any stores or are they just on the net? I would like to get one, but don't order anything off of the net (with the exception of services or products I can send a money order in for).
    \"Life should NOT be a journey to the grave with the intention of arriving safely in an attractive and well preserved body, but rather to skid in sideways, Champagne in one hand - strawberries in the other, body thoroughly used up, totally worn out and screaming WOO HOO - What a Ride!\"
    Author Unknown

  10. #10
    Senior Member
    Join Date
    Jul 2003
    Posts
    634
    avdven: cool product, thanks for the link, do you know how many bit encryption it is?

    ooopppsss answered my own question, its a 128bit.

    I believe that the AES key that had a free trail on here is capable of such things, I think there only about $30 from think geek, but i might of dreamt that. you can also get the free 6 month trial as well, but it took them ages to deliver mine (hopefully you dont live in teh axis of evil because they wont send you one...).

    I wounder if a simple solution/ cheap solution similar to this could be achieve by using a CD and autorun..

    as for the original poster, you shouldnt all have admin aco****s, its bad practice...1 admin and then user power user accounts.

    the passwords dont take long to crack using l0phtcrack, i tried the free download on a 13digit?? password and it broke it in 30minutes i think, I knew the password wasnt as strong as it could of been i was just evaluating the free product, so couldnt use numbers or symbols in the PW.

    Why dont you just keep your porn on a CD/ DVD and then bury it in the backgarden from when you need it....(it might not be porn youve got, but thats the normal question.."how do i stop my mom finding my porn")

    you could also get a harddisk caddie (that the rite spelling?)

    i2c

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •