How to catch Trespassing

Hi there

Is there a way to know if someone is using my office computer while I am
away? I have a windows password but anyone who knows my password or knows the
administrator password can get into my computer, right? If the trespasser has
the administrator password, it's no use for me to change my windows password
then? How do I know for sure if people are getting in? And how to stop that?
Also, is there a way to secure my emails (I use Microsoft Outlook) through
some password so that no one can read them?

Thanks

Pandaman
Wed Mar 29 09:55:02 CST 2006

My reply is at the bottom of your message :

"Raj Mazumdar" wrote:

> Hi there
>
> Is there a way to know if someone is using my office computer while I am
> away? I have a windows password but anyone who knows my password or knows the
> administrator password can get into my computer, right? If the trespasser has
> the administrator password, it's no use for me to change my windows password
> then? How do I know for sure if people are getting in? And how to stop that?
> Also, is there a way to secure my emails (I use Microsoft Outlook) through
> some password so that no one can read them?
>
> Thanks
>


Appoint someone who will be guarding the computer 24 hours a day.Give him
food,water,some alchohol and chocolate and tell him to guard the computer so
nobody unauthorised will be able to access thit .No other way can guarantee
you 100% success.
Yes,this way rude joke but it is true...
You can set up a password to the BIOS.
Pros : No Operating system will be loaded until you enter valid password
Cons: Too risky in case you forget it.
Cons: Everyone with physical access can somehow open the box(if you use
PC,not laptop) and get out a special battery for some minutes which will
reset the BIOS password
Pros: If you use laptop , it would be extremely difficlult for guy XYZ to
open it but it is extremely difficult ,not impossible.

Make sure you have difficult to recognise admin password and your accont
password.Use numbers,letters and special characters and no stupid well known
combinations.

No special way t osecure Outlook.You can set it not to check for new mail
until you enter valid password but this doesn't stop the criminal from seeing
old mail.


Be optimistic! Just to the normal things and hope that noone else is maniac
who want to access your computer :-)


Panda_man
--
Prevention is always better than cure !
--
http://pandaman.my.contact.bg
http://www.activescan.com
Please , rate posts

RajMazumdar
Wed Mar 29 10:13:01 CST 2006

Thanks Panda_man for the insight. However the people that I am suspecting
have only some basic computer knowledge and nothing more... What's the
"password to the BIOS"? How do I set it... Apologies, but my knowledge is
basic too in this aspect.

Thanks

"Panda_man" wrote:

> My reply is at the bottom of your message :
>
> "Raj Mazumdar" wrote:
>
> > Hi there
> >
> > Is there a way to know if someone is using my office computer while I am
> > away? I have a windows password but anyone who knows my password or knows the
> > administrator password can get into my computer, right? If the trespasser has
> > the administrator password, it's no use for me to change my windows password
> > then? How do I know for sure if people are getting in? And how to stop that?
> > Also, is there a way to secure my emails (I use Microsoft Outlook) through
> > some password so that no one can read them?
> >
> > Thanks
> >
>
>
> Appoint someone who will be guarding the computer 24 hours a day.Give him
> food,water,some alchohol and chocolate and tell him to guard the computer so
> nobody unauthorised will be able to access thit .No other way can guarantee
> you 100% success.
> Yes,this way rude joke but it is true...
> You can set up a password to the BIOS.
> Pros : No Operating system will be loaded until you enter valid password
> Cons: Too risky in case you forget it.
> Cons: Everyone with physical access can somehow open the box(if you use
> PC,not laptop) and get out a special battery for some minutes which will
> reset the BIOS password
> Pros: If you use laptop , it would be extremely difficlult for guy XYZ to
> open it but it is extremely difficult ,not impossible.
>
> Make sure you have difficult to recognise admin password and your accont
> password.Use numbers,letters and special characters and no stupid well known
> combinations.
>
> No special way t osecure Outlook.You can set it not to check for new mail
> until you enter valid password but this doesn't stop the criminal from seeing
> old mail.
>
>
> Be optimistic! Just to the normal things and hope that noone else is maniac
> who want to access your computer :-)
>
>
> Panda_man
> --
> Prevention is always better than cure !
> --
> http://pandaman.my.contact.bg
> http://www.activescan.com
> Please , rate posts

Malke
Wed Mar 29 10:41:25 CST 2006

Raj Mazumdar wrote:

> Thanks Panda_man for the insight. However the people that I am
> suspecting have only some basic computer knowledge and nothing more...
> What's the "password to the BIOS"? How do I set it... Apologies, but
> my knowledge is basic too in this aspect.

Here is a more systematic reply that covers what Panda_man already told
you:

Any computer running any operating system can be accessed by someone
with 1) physical access; 2) time; 3) skill; 4) tools. There are a few
things you can do to make it a bit harder though:

1. Set a password in the BIOS that must be entered before booting the
operating system. Also set the Supervisor password in the BIOS so BIOS
Setup can't be entered without it.
2. From the BIOS, change the boot order to hard drive first.
3. Set strong passwords on all accounts, including the built-in
Administrator account.
4. If you leave your own account logged in, use the Windows Key + L to
lock the computer (and/or set the screensaver/power saving) when you
step away from the computer and require a password to resume.
5. Make other users Limited accounts.

Please understand that these are technical responses to what is
basically a non-technical problem. This is a family/interpersonal issue
that can't be solved by technical means.

Here is a link about entering the BIOS:
http://michaelstevenstech.com/bios_manufacturer.htm

If these steps seem difficult, then have a professional set you up.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Pandaman
Wed Mar 29 10:41:03 CST 2006

My reply is at the bottom of your message :


"Raj Mazumdar" wrote:

> Thanks Panda_man for the insight. However the people that I am suspecting
> have only some basic computer knowledge and nothing more... What's the
> "password to the BIOS"? How do I set it... Apologies, but my knowledge is
> basic too in this aspect.
>
> Thanks
>
>


Hello again ! Oh,thank you ! Well , if these guys have limited computer
knowledge,you don't need to worry.If your knowledge is basic,too, you'd
better not touch in the BIOS -this is something like a computers heart.

BIOS is special menu integrated into every computer that can control some
very special functions of the computer.It has nothing to do with the
Operating system.
Also , it should be noted that most but still not all BIOS support password
protection.Also you enter BIOS via constantly hitting DEL before Windows
starts on start up (before the Win logo appears) but again if you knowledge
is basic don't try to enter the BIOS because things can get worse.

Just make sure your account has password and it is strong.
Also make sure the built in admin account is password protected with strong
password and nobody else known the passwords.The built in admin account can
be accessed in Safe Mode or by double clicking CTR+ALT+DEL on the welcome
screen in XP Pro. :-)


Panda_man
--
Prevention is always better than cure !
--
http://pandaman.my.contact.bg
http://www.activescan.com
Please , rate posts

RajMazumdar
Wed Mar 29 11:12:02 CST 2006

thanks guys... lokks complicated... will refrain from doing it... thanks for
your time anyway

"Malke" wrote:

> Raj Mazumdar wrote:
>
> > Thanks Panda_man for the insight. However the people that I am
> > suspecting have only some basic computer knowledge and nothing more...
> > What's the "password to the BIOS"? How do I set it... Apologies, but
> > my knowledge is basic too in this aspect.
>
> Here is a more systematic reply that covers what Panda_man already told
> you:
>
> Any computer running any operating system can be accessed by someone
> with 1) physical access; 2) time; 3) skill; 4) tools. There are a few
> things you can do to make it a bit harder though:
>
> 1. Set a password in the BIOS that must be entered before booting the
> operating system. Also set the Supervisor password in the BIOS so BIOS
> Setup can't be entered without it.
> 2. From the BIOS, change the boot order to hard drive first.
> 3. Set strong passwords on all accounts, including the built-in
> Administrator account.
> 4. If you leave your own account logged in, use the Windows Key + L to
> lock the computer (and/or set the screensaver/power saving) when you
> step away from the computer and require a password to resume.
> 5. Make other users Limited accounts.
>
> Please understand that these are technical responses to what is
> basically a non-technical problem. This is a family/interpersonal issue
> that can't be solved by technical means.
>
> Here is a link about entering the BIOS:
> http://michaelstevenstech.com/bios_manufacturer.htm
>
> If these steps seem difficult, then have a professional set you up.
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

Pandaman
Wed Mar 29 11:20:02 CST 2006

Feel free to contact the Community again !

Panda_man
--
Prevention is always better than cure !
--
http://pandaman.my.contact.bg
http://www.activescan.com
Please , rate posts

Mr
Thu Apr 06 16:44:40 CDT 2006

You could also look in the event viewer and take note of the last time you
used your pc.
You should notice that when you come back that the only logged events where
from you starting up your pc again.
This would work is these people are not that pc savy to cover their tracks.

Hell if i wanted in your pc w/o you knowing so i can take your info.
1. I would make a ghost of your pc using symantec ghost or acronis.
2. I would even go as far as to us vmwares P2V and make a virtual copy of
your PC.
3 I would run that or mount the ghost images and view all of your data.
4 Even with ghost I could reimage back to a simular machine and see what you
have been doing so no bios password would ever keep me out.

5 If laptop... This is simple; We now have this thing called google. Type:
Lost my laptops bios passwaord.
DONE! There will be so much info you would think that your reading a novel.
6. You are not safe! Someone knows someone whom knows someone whom can get
into your pc.

7. What I would do is this. If running XP Pro. I would encrypt all that I do
no want people to see 1st. step. Doesnt mean your safe.
8. I would make another account on the mahcine for a seconday user.
9 I would make a startup script to delete all files on my system if the even
that someone was to log into my account.
Simple as typing del /f/s/q C:\*.*
10. Have a backup some place where you can get your data back.

Or.......... lets start over. 8. I would use group policy and lock anyone
out of the system so that no one not even I could log into the machine
localy. This means that you can now only unlock your OS (XP) from a remote
PC via RDP or network commands.


Its up to you. one thing is try always. Security is only what you think it
is. If you feel you have the best, then it is best. But once broken you
know you need to improve. We live and learn.




"Raj Mazumdar" <RajMazumdar@discussions.microsoft.com> wrote in message
news:38ABC8E5-A34D-43D3-8FBA-3F7DC0691EE1@microsoft.com...
> Thanks Panda_man for the insight. However the people that I am suspecting
> have only some basic computer knowledge and nothing more... What's the
> "password to the BIOS"? How do I set it... Apologies, but my knowledge is
> basic too in this aspect.
>
> Thanks
>
> "Panda_man" wrote:
>
>> My reply is at the bottom of your message :
>>
>> "Raj Mazumdar" wrote:
>>
>> > Hi there
>> >
>> > Is there a way to know if someone is using my office computer while I
>> > am
>> > away? I have a windows password but anyone who knows my password or
>> > knows the
>> > administrator password can get into my computer, right? If the
>> > trespasser has
>> > the administrator password, it's no use for me to change my windows
>> > password
>> > then? How do I know for sure if people are getting in? And how to stop
>> > that?
>> > Also, is there a way to secure my emails (I use Microsoft Outlook)
>> > through
>> > some password so that no one can read them?
>> >
>> > Thanks
>> >
>>
>>
>> Appoint someone who will be guarding the computer 24 hours a day.Give him
>> food,water,some alchohol and chocolate and tell him to guard the computer
>> so
>> nobody unauthorised will be able to access thit .No other way can
>> guarantee
>> you 100% success.
>> Yes,this way rude joke but it is true...
>> You can set up a password to the BIOS.
>> Pros : No Operating system will be loaded until you enter valid password
>> Cons: Too risky in case you forget it.
>> Cons: Everyone with physical access can somehow open the box(if you use
>> PC,not laptop) and get out a special battery for some minutes which will
>> reset the BIOS password
>> Pros: If you use laptop , it would be extremely difficlult for guy XYZ to
>> open it but it is extremely difficult ,not impossible.
>>
>> Make sure you have difficult to recognise admin password and your accont
>> password.Use numbers,letters and special characters and no stupid well
>> known
>> combinations.
>>
>> No special way t osecure Outlook.You can set it not to check for new mail
>> until you enter valid password but this doesn't stop the criminal from
>> seeing
>> old mail.
>>
>>
>> Be optimistic! Just to the normal things and hope that noone else is
>> maniac
>> who want to access your computer :-)
>>
>>
>> Panda_man
>> --
>> Prevention is always better than cure !
>> --
>> http://pandaman.my.contact.bg
>> http://www.activescan.com
>> Please , rate posts