Malke
Sun Mar 04 09:13:42 CST 2007
FunToKnow wrote:
> My son is probably using the "Safe Mode" method described to eliminate my
> Administrator password so he can access his user account after I've grounded
> him/changed his password. (XP Home)
>
> Should I use this same method to put an Admin password where it comes up
> blank? or the "NTpasswd" method described at the Eunet URL? I've read in the
> MS article to leave the Admin spot blank, so I'm afraid to tamper and get
> unwanted results.
>
> There's also the Windows startup password
> option:(
http://support.microsoft.com/kb/310105/en-us)
>
>
Next time please don't post your new question in the middle of someone
else's thread. Since we're both here now, here is my standard answer to
questions like yours:
Any computer running any operating system can be accessed by someone
with 1) physical access; 2) time; 3) skill; 4) tools. There are a few
things you can do to make it a bit harder though:
1. Set a password in the BIOS that must be entered before booting the
operating system. Also set the Supervisor password in the BIOS so BIOS
Setup can't be entered without it.
2. From the BIOS, change the boot order to hard drive first.
3. Set strong passwords on all accounts, including the built-in
Administrator account.
4. If you leave your own account logged in, use the Windows Key + L to
lock the computer (and/or set the screensaver/power saving) when you
step away from the computer and require a password to resume.
5. Make other users Limited accounts in XP Home, regular user accounts
in XP Pro.
6. Set user permissions/restrictions:
a. If you have XP Pro, you can set user permissions/restrictions with
Group Policy (Start>Run>gpedit.msc [enter]) but be careful. Using the
Policy Editor can be tricksy. Questions about Group Policy should be
posted in its newsgroup: microsoft.public.windows.group_policy.
b. If you have XP Home, you can use MVP Doug Knox's Security Console or
the MS Shared Computer Toolkit. The Toolkit can also be used in XP Pro
and may be easier for a newbie than using Group Policies.
http://www.dougknox.com
http://www.microsoft.com/windowsxp/sharedaccess/default.mspx
microsoft.public.windows.sharedaccess - Toolkit newsgroup
Please understand that these are technical responses to what is
basically a non-technical problem and there are ways around all of these
precautions. This is a family/interpersonal issue that can't be solved
by technical means.
Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User