Printable View
I find this a good issue to be posted here. I hope there is a fix for this, but with Windows XP there is a hole that allows users to bypass the Admin Logon prompt.
They simply have to boot their computer through Windows 2000 CD, choose the boot up a windows XP box and start windows 2000 the Recivery Console.
After that just put in a username and if the account requires a password then they will be logged on under that name without the need of a password.
PLEASE E-Mail me for a fix
There is no fix for this. It has been a known issue for about 7 or 8 months. You can boot machines with a knoppix CD as well as many others. Bottom line, if someone has physical access to your box, you're owned anyway.
or you could eat all the windows 2000 cd's in the world
a friend of mine *tried* to eat a windows 98 cd and I'd personally recommend to not do it
post scriptium:
I'm sorry for this very shitty and useless reply, but I have to wait 5 minutes before I can shut this computer down and go do something else, so I'm in this area of time where you have to little time to do something else and to much time to just sit arround and wait...
mmmm, Win98 CD's make a tasty alternative to pancakes.
In your local security policy disable automatic administrative login, next use EFS to protect anything important. Even if an attacker boots from a cd image to alter the SAM, this will break the EFS seamlessness. (similar to when the admin changes a users password the keys are lost) You will of course wish to backup the keys to a secure location to prevent any accidental loss of EFS affected objects.
No this is not 100% secure, but it dramatically increases the resource level a successful attacker must have availible to them.
catch
set a bios pasword, dissallow booting from cd and anything else but the hd, build in some booby trap thing that makes the hd explode when the case is opened
If it is possible, also put a lock or zip tie on the back so the case can't be opened easily... you can easily reset the BIOS passwords if the motherboard has the ability... and I've yet to see one that doens't. Some laptops make it nearly impossible to reset the BIOS password too...Quote:
Originally posted here by neel
set a bios pasword, dissallow booting from cd and anything else but the hd, build in some booby trap thing that makes the hd explode when the case is opened
solution:Quote:
Originally posted here by phishphreek80
If it is possible, also put a lock or zip tie on the back so the case can't be opened easily... you can easily reset the BIOS passwords if the motherboard has the ability... and I've yet to see one that doens't.
Quote:
Originally posted here by neel
build in some booby trap thing that makes the hd explode when the case is opened
I play at a lot of LAN parties the steps I take to keep people out of this O.S. is to reroute the power switch to a remote part of the box only I know what pannel to hit to turn the comp on. Now back to the question hell all you have to do to get an adminastrato account is hit a certain F* button and it lets you boot into safe mode then you give yourself a admin account thats why miorosoft is meant for the average newbie who forgets his or her password.
Mike tysonnQuote:
Microsoft is gay
I'm not sure about on 2k... but on XP, safe mode and command prompt mode/recovery console require you to enter the admin password. Just hope that you haven't renamed your "administrator" account... because if you did... you can't get logged in.Quote:
Now back to the question hell all you have to do to get an adminastrato account is hit a certain F* button and it lets you boot into safe mode then you give yourself a admin account thats why miorosoft is meant for the average newbie who forgets his or her password.
It won't allow you to change the username that you are required to enter a password for. Since you have renamed "administrator" and it is trying to login to that account name... you are screwed.
Thats when the NT Offline password recovery utility comes into play. ;)
My advice:
There is NO reason to have CD ROMs or Floppies in an environment where the kiddies can't be trusted. Take them out and use network based images for software. Sure some slack head will come in with a USB based version of an I/O device… bat that's pretty obvious, terminate on sight. BTW, a few major manufacture utility CDs (not OS distributions) are also bootable to Windows 98 command line. This is so tech support can have you load untils when needed.
does the recovery console admin thing work in 2000 or just xp? I ask because I'm just starting an internet/network security class in which i will be required to break into windows 2000 server machines and i'm dreadfully out of practice. (I see noone in the class that presents much of a challenge to me, but securing a system from remote attack is easier than hacking it remotely but secureing a system from physical attack is seemingly impossible)
Hi Guys,
Getting on towards Autmn(Fall) so time for me to start warming up for my "stupidest post of the year" :)
Physical security is always going to be a problem. The only way I have seen this fixed is if you are a big enough customer to get the computer supplier to fix the BIOS for you. Or can do this yourself.
If you open the back, and trip the reset switch, it only takes you back to the factory preset BIOS........which you have dictated. If you make sure that your bios chip(s) is/are surface mounted, this will make it a bit more difficult as well.
You need to disable boot from network, floppy and CD and password protect BIOS flashing. Also disable adding new hardware to screw the USB/serial/parallel merchants.
Do not install devices that are not required such as CDs, and floppies, USBs etc.
Lock the back.
I have seen this kind of stuff...............it works........well took me three hours to break :D
Has anyone considered "terminal servers"............just a dumb/semi-intelligent machine on the desk, and all has to be done through the servers (which are protected by a pack of rabid Rottweilers on the far side of the pirahna infested lake :D )
If you cannot trust your employees...........don't employ them???????????????
Cheers
I have found another problem similar to this one, if you press the button for safemode, (usually F8,) when XP is at its loading screen, before the login, then you get screen asking which os to boot to safe mode, (or something like that,) and choose XP, you are then logged into the r00t Admin account of the OS. Let's all give Mr. Gates a big thumbs up!
nihil, might I nominate this post for stupidest post of the year?
http://www.antionline.com/showthread...0&pagenumber=1
LOL, ok this thread entertained me for bit while iam sitting in a computer class that some ****ing idiot of a counsler put me in, YAY for Intro to computer science. But still I like the idea of boobie trapping your case, Im alos gonna work on re routing my power button so I can touch a pannel for it to turn on, also Im going to put a finger print recognition on it so I can be cool like james bond :).
x acidreign x
Sir, you really know how to destroy a guy's ambitions............hell if I trained from 04.00 to 22. 00, there is no way I would be ready for the next Olympics?
How do you find stuff like that?..........no don't tell me............I am already upset enough :)
XTC46... I don't know if you can do it, but iris recognition is better...........you gotta stick your eyeball in front of the camera, also try voice recognition.....there are a few free proggys out there for that. Fingerprints are another part of the puzzle, as is optical character recognition.
You have then got a pretty cool security system? you have to kidnap the dude, get him to say something, and tape it (got to be top quality kit or it won't work), skin his fingers and set up a hand with them on, gouge out his eyeball without bursting it, get someone to be quick at forging his writing?..................you tell me how to get round it, and I will tell you why it will fail, without giving away trade secrets :D
good luck
iam in a trouble because i forgot my winxp admin password .Is there any way to get into my
administrative account.If any one knows please help me.
I saw a nice movie about eyeball recognition security. The badguy just killed the important guy and cut out his eye... heh...
The fingerprint reader I use, measures the electrical contrinuity of the person as well. Meaning it attempts to measure the electrical characteristic of the human the finger is attached too, and if you cut off his finger the measurment of resistance in your oily skin will be different. Although I haven't tested it.... yet! :D
gi_ab
find a bootdisk tool called ntpasswd, you can reset your password on an 2000/xp system, the downside is if you encrypted any files using EFS, they are no longer accessible to you.
neel- it was demolition man.
we have iris recognition systems in my netsec class that we will work with, my teacher says they are pretty secure, and that everytime they tried to surpass them, they had to reload the operating system. I have a theory of how to get past it, but i have to wait till we get to that section before i can test it.
From the responses so far it would seem that as the "problem" requires physical access, the solution has to be a physical one as well?
I remember back in my IBM mid-range days the IBM Software Engineer always had a couple of disks that allowed him to log in as security officer (qsecofr) provided that he had access to the computer console. Also that all sensible sites had the computer room locked,with access control in place.
I think the same physical security tends to go for network servers these days? it is just the desktop PCs that have created these vulnerabilities, because they are out in the workplace? The old "dumb terminals" did not require any protection?
I have noticed on Defence Industry Sites that the desktops tend NOT to have CD drives, and that the floppy drive is disabled. Also the hard drives tend to be in removable bays .........this may well be the cheapest and simplest solution in some environments :)
Can anyone think of a way to exploit a machine WITHOUT a hard drive? in general terms of course :)
Cheers
is there like a batch file or something i could create that on startup will disable booting from a CD?
Szafran, I really think you need to read some basic articles on how a PC works.Quote:
Originally posted here by Szafran
is there like a batch file or something i could create that on startup will disable booting from a CD?
Any computer store will have books for people new to computers, or you can find a wealth of information here, as well as at other sites.
Your question is meaningless, as the decision as to whether or not to boot from a CD (or anything else) has absolutely nothing to do with a batch file.
Perhaps if you searched on google for BIOS & digested some of the earlier posts in this thread, you might get somewhere ??
actually i could probably write a few of those books on computers. And i know it in possible to disable a drive with a batch file. If i were to edit forsay Autoexec.bat and put a command into it to run my batch then i would be all set. But i'm pretty sure that autoexec.bat runs after the scanning for boot disks
Szafran,
You need to think about how your PC works? Your general home PC will go 3.5 floppy, CD, HDD, in its boot sequence.
If you are thinking about "batch files"........................forget it..............you are already owned :D You MUST hit this right up front in the POST cycle. This means you have to set your BIOS/CMOS to deny booting from the devices you want to exclude. If you let your box boot from a floopy you are dead................I just need one of the DOS utilities from the HDD manufacturers..............or even a simple WIN98 boot disk..............I then get to use the CD long before any batch file would cut in? To put it another way, if the OS has booted............too late!
This gets back to physical security. If you can get into the box you can reset the BIOS/CMOS. This is generally via a switch or removing the CMOS battery?
I am afraid that you might be falling into the classic mistake of providing answers rather than asking questions. What I mean is, just what is your project objective? If you gave us a better idea we might be able to help.............could be that there is a software solution, but not where you are looking at the moment.
PM me if you like............wouldn't like you to get negged :)
Cheers
ROFL !! I presume you are talking about paying someone to publish misleading, incorrect information.Quote:
Originally posted here by Szafran
actually i could probably write a few of those books on computers. And i know it in possible to disable a drive with a batch file. If i were to edit forsay Autoexec.bat and put a command into it to run my batch then i would be all set. But i'm pretty sure that autoexec.bat runs after the scanning for boot disks
You are completely missing the point here, as of course you can disable anything you like after the OS has booted, which in your case, I presume is Win9x.
But what ru going to do when I boot something completely different from a floppy, CD, or a USB slot ???
This is not the right forum for this discussion, as it should be in 'Newbie help'.