Is win XP security meaningless with safe mode?

[PG]

I've been trying to make one of my home computers more secure. I run winXP Pro as the OS.

1. The case locks so someone can't get in to reset the BIOS.
2. I changed the boot order so that it will only boot from the hard drive and nowhere else.
3. I added a BIOS password to prevent someone from even getting to the BIOS.
4. I got rid of auto login. Now I have to login each time it boots up.

But just today I read somewhere that if you hit F8 on boot up you are taken to Safe Mode where you have Admin privledges. DOH! Has all my work been in vain? Is there any way to truly have a secure system while running XP? I hope there is a way to password protect Safe Mode but I haven't found anything yet.

 

[wolf31o2]

You still have to log in with XP's safe mode. Someone might have confused it with the recovery console, which does not require a login, but is unable to run programs and only has access to certain directories.

 

[NokiaDude]

Umm, what in heck do you need all those security measures taken? Booting only from the HDD? that sounds like more hassle in the future to me. Locking the case? Ok for little kids and screwy teenagers but un-neccisary for you.

 

[Nothinman]

You still need to login to XP even in Safe Mode, so it should be fine. Hell even if you boot from the XP install CD and go into the Recovery Console you need to login.

Booting only from the HDD? that sounds like more hassle in the future to me.

Why? I can't remember the last time I booted from floppy or CD, hell I can't remember the last time I rebooted =) If the time comes that the box needs fixing, it takes 10s to go into the BIOS and change it.

 

[PG]

Thanks for the advice everyone.

I don't need any of this extra protection. I'm just in a paranoid mood and wanted to secure my system.

This is the article that got me thinking. I think the old goat must just be wrong.

http://www.chicagotribune.com/business/columnists/chi-0301270014jan27,0,5023256.column

Published January 27, 2003


Q. I utterly forgot my Windows XP password as administrator, a big mistake, and I don't know how to correct it. When we set things up, I designated myself as system administrator, and all others as not, to prevent unsupervised downloads from happening. All went well until I changed my password after a security breach. Unfortunately, when I attempted to log on for the first time after I changed it, what I thought would work didn't.

After many different attempts with many different guesses, I realized that I could not recall to what I had changed the password. I thought that I'd just restore the computer to a time previous to when I changed it but, alas, you need to have system administrator authority to restore to past dates. Is there any way, short of calling Microsoft, to overcome this early onset of forgetfulness?

Jim Birchfield, Woodstock

A. There's a back door that will save your hide, Mr. B. You can start Windows in so-called Safe Mode, which will establish you as a super administrator with all those powers restored, albeit on a machine greatly stripped of its graphic displays and other bells and whistles while you make a quick fix.

In Safe Mode one can run all of the System Administration tools, including System Restore, so you can get that network back up and humming in a matter of minutes.

You've got to be quick at the start. During bootup, wait until the BIOS screen with the black background flashes, then hit the F8 key before the graphic Windows logo appears, and the Safe Mode bootup will begin using generic graphic drivers and other basic software only. The purpose is to permit troubleshooting just as you need.

In Safe Mode, click on the great big clunky Start button and then click on All Programs and Accessories and System Tools to find System Restore. Run it and go back in time to a happier place when your old password was in force, and the problem is solved.

 

[PG]

Just did a test and yes, XP made me log in for Safe Mode.

But I have one problem. When booting I can hit F8 to get into some sort of boot menu. This has something to do with my BIOS. Anyway, it lets me choose what I want to boot from, so I still have an insecure system. I think there's something FUBAR'ed with my BIOS because there is a setting that has something to do with booting from other devices and I picked NO. Somehow it's still possible though.

 

[mikecel79]

Wjem you hit F8 that is the Windows XP Boot Menu. It is not your BIOS boot menu.

 

[PG]

Originally posted by: mikecel79
Wjem you hit F8 that is the Windows XP Boot Menu. It is not your BIOS boot menu.

It isn't my BIOS, but it isn't the Windows XP Boot Menu either. What I'm talking about is hitting F8 right as the computer is checking memory. Then a little menu pops up asking if I want to boot from Floppy, CDROM, Hard Drive, or Network, etc.
Later after all the BIOS stuff shows on the screen then I can hit F8 and get into the Windows XP Boot Menu. I don't know what to call that first menu, but it isn't my BIOS and it isn't the Windows XP Boot Menu either.

 

[Thor86]

No operating system can provide the kind of "physical" security you are looking for. If you are that paranoid, I suggest you lock up your computer.