|
-
February 26th, 2004, 10:05 PM
#6
HT: Doh..... Now you tell me.... <LOL>
I do find it interesting though that a simple BIOS reset of the clock unlocks the account. It means that with physical access I can brute force an admin password without regard for the lockout period because I can just reset it. Maybe there should be a system where the admin can chose the following options:-
On account lockout check expired time by:-
1. Local Time server on network.
2. Internet based clock synch.
3. Internal timer, (registers clock ticks as long as machine is left on).
4. No check of expired time required, use system BIOS.
In that way a given period can be enforced. If remote time sources cannot be accessed then the system reverts to 3 so that the lockout time is at least as much as the admin set. If the remote machine later becomes available then it's time is accepted if 1 or 2 were selected.
I did try a few other things like password reset programs but the one I tried for that did not recognize the disk even when the controller drivers were provided so I was still stuck.
Don\'t SYN us.... We\'ll SYN you.....
\"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|