View Full Version : security issue of simply reformatting!
Simon
December 5th 03, 07:43 PM
Hi
We are using XP pro. Each pc has one userid and pw to gain access
Our pc's harddisks are formatted to have C: and D:
c: for the OS
d: for data
It came to my attention recently that all someone would need to do to gain
access to the pc is
reformat the c: and reload the OS and he/she would then have full access to
all the data on the D: !!!
Anyone else thought of this?! Any preventative measures??
Mike Brannigan [MSFT]
December 5th 03, 07:43 PM
"Simon" > wrote in message
...
> Hi
>
> We are using XP pro. Each pc has one userid and pw to gain access
>
<snip>
> It came to my attention recently that all someone would need to do to gain
> access to the pc is
> reformat the c: and reload the OS and he/she would then have full access
to
> all the data on the D: !!!
>
> Anyone else thought of this?! Any preventative measures??
Yes - use the Encrypting Files System (EFS) - if you allow you PC to be
physically compromised and have another Operating System installed then your
only recourse is the use of technology that cannot be circumvented by simple
file system level access.
This is an old problem and common to just about any OS. EFS is the solution
you are seeking.
--
Regards,
Mike
--
Mike Brannigan [Microsoft]
This posting is provided "AS IS" with no warranties, and confers no
rights
Please note I cannot respond to e-mailed questions.
Please use these newsgroups
"Simon" > wrote in message
...
> Hi
>
> We are using XP pro. Each pc has one userid and pw to gain access
>
> Our pc's harddisks are formatted to have C: and D:
>
> c: for the OS
> d: for data
>
> It came to my attention recently that all someone would need to do to gain
> access to the pc is
> reformat the c: and reload the OS and he/she would then have full access
to
> all the data on the D: !!!
>
> Anyone else thought of this?! Any preventative measures??
>
>
Roger Abell {MVP}
December 5th 03, 07:43 PM
This is why we say that physical security is everything.
Two partitions are not essential to this either.=20
If you cannot control who can get to the machine with=20
a screwdriver and CD then there is not much you can=20
do to guard it 100%
--=20
Roger=20
"Simon" > wrote in message =
...
> Hi
>=20
> We are using XP pro. Each pc has one userid and pw to gain access
>=20
> Our pc's harddisks are formatted to have C: and D:
>=20
> c: for the OS
> d: for data
>=20
> It came to my attention recently that all someone would need to do to =
gain
> access to the pc is
> reformat the c: and reload the OS and he/she would then have full =
access to
> all the data on the D: !!!
>=20
> Anyone else thought of this?! Any preventative measures??
>=20
>
vBulletin® v3.6.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.