Re: Securing Data on a Notebook



allanc wrote:

Interesting. Thank you.

Is it not possible to 'reset' the BIOS so that the password is
deleted?



On Mar 31, 1:55 pm, "C.Joseph S. Drayton" <cs...@xxxxxxxxxx> wrote:
allanc wrote:
Which program do you recommend to lock out usage of the CD and
diskette?
But couldn't someone still boot from the CD as it has its own O/S
on >it?
TIA.

On Mar 30, 11:13 pm, "C.Joseph S. Drayton" <cs...@xxxxxxxxxx>
wrote: >> allanc wrote:
One of my clients has some very sensitive data on his notebook
which  >is running XP PRO sp2.
He has used a strong Administrator's password and has disabled
the >> >Guest account.
He does not plan to access the Internet or use Email.
Basically, the notebook is for Word and Excel.

Can files be copied in DOS or SAFE mode?
Can Spyware programs be installed?

TIA.

First of all, your friend would need to disable the ability to
boot >> from floppy (assuming it has one) or CD. If he doesn't,
then a >>person  could put in a boot disk that will reset the
WindowsNT >>(including  WindowsXP) administrator password. Note
the boot disk >>is freeware and  the ISO for it can be downloaded
from the Internet.

Second, he would need to run a lock program from within Windows
that  locks out access to the floppy and CD. The one I use
requires >>a  password before either type of drive can be used.

Next he needs to use a good encryption system TrueCrypt is my
current  favorite. with it you can create encrypted containers
that >>allow for  file access in real-time rather than
decrypt/use/encrypt.

Lastly, if he uses things like a pagefile, temp files (note that
quite  a few document prrocessing programs automatically use temp
files), or  caches or clipboard enhancer. they should be pointed
at >>a separate  encrypted container. He should be extremely
careful >>about the pagefile  when were with confidential data . .
. you be >>surprised at what can be  extracted from a pagefile
these days.

--

Sincerely,
C.Joseph Drayton, Ph.D. AS&T

CSD Computer Services
Web site:http://csdcs.tlerma.com/
E-mail: cs...@xxxxxxxxxx

Hi Allan,

I use the freeware programs USBlocker & CDLocker by Stephen
Morgan. I have compressed and encrypted the 2 executables using
KaKa EXELock so that a password must be entered before the
executable will run.

As to using a bootable CD, if booting from the CD is disable in the
BIOS, then as far as the system is concerned when it tries to boot
it ignores whatever is in the CD drive. That is why I mentioned
disabling both CD and floppy at the BIOS level. On my machine, I
have it disable and set the first boot device as the primary hard
disk. If I were to pull the hard disk, it still wouldn't try to
boot from the CD.

--

Sincerely,
C.Joseph Drayton, Ph.D. AS&T

CSD Computer Services
Web site:http://csdcs.tlerma.com/
E-mail: cs...@xxxxxxxxxxx Hide quoted text -

- Show quoted text -

On a laptop for the most part no. There are a few older laptops that
you could build a serial port dongle for that would clear the BIOS. In
newer laptops thats not possible.

As to pulling the CMOS battery, the BIOS setting are stored on FlashRAM
so are not effected by pulling the CMOS battery. Some of the newer
business desktops have begun using FlashRAM for the BIOS settings for
just that reason.

--

Sincerely,
C.Joseph Drayton, Ph.D. AS&T

CSD Computer Services
Web site: http://csdcs.tlerma.com/
E-mail: csdcs@xxxxxxxxxx
.



Relevant Pages

  • Re: crash please help
    ... If so, reset the bios. ... I'm assume your Vista Disc will not boot -- but can you put any sort ...
    (microsoft.public.windows.vista.general)
  • Re: 2 wondows versions detected on pc startup?
    ... if not put there by the BIOS? ... BIOS examines the very first sector of the disk for a Master Boot Record ... table which describes the layout of the fixed disk and the partition loader ... This is where Windows and NTLDR comes in, ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: maximum hard drive size in Latitude cpi
    ... > actually written a boot loader they won't be so adamant about how "Windows ... > of the disk, and while it is being read off of the disk the machine is ... > limitatoins of that BIOS. ... After that the kernel takes over. ...
    (comp.sys.laptops)
  • Re: Fn-F2 on dell 1505 under debian 4.0 etch
    ... now you can change bios, cmos setting of your dell laptop from ... some tokens are here:http://linux.dell.com/libsmbios/main/token.html ... "Enables the systemâ??s built-in parallel port to operate in AT mode ... 0x0051 Boot_Diskette_First "For the next system boot, ...
    (comp.sys.laptops)
  • Re: [DOCUMENT] Re: Intel Macs that boot FreeBSD?
    ... on how closely coupled the FreeBSD/i386 boot process is to the BIOS ... Reads and relocates boot2 to low memory to continue boot process ... 40:49h Video Mode ...
    (freebsd-current)

Loading