Originally posted by: reicherb
I've got a client with a WinXP Pro PC with one user account who forgot the password to login. Is there anyway to get around the login?
Thanks.
No password, no get in. (well without hacking)IIRC he could use a windows 2000 disk to gain superuser access to the recovery console on a WinXP machine as well, right?
Dude, this has been around for awhile. If it makes you feel any better, in a work environment, lock the case, have the system boot to hard disk ONLY, and password protect the BIOS.Doesn't this incredibly huge security hole bother anyone? I know physical access to the machine is needed to make this work, but still!
EVERYTHING can be hacked! Welcome to the world of zeros and ones.Welcome to the world of Microsoft
Originally posted by: Need4Speed
Welcome to the world of Microsoft![]()
Originally posted by: JackBurton
EVERYTHING can be hacked! Welcome to the world of zeros and ones.Welcome to the world of Microsoft![]()
Originally posted by: bsobel
Originally posted by: Need4Speed
Welcome to the world of Microsoft![]()
I realize it's cute to MS bash, but do it when it only applies to them. Physical access issue are OS independant, linux and other system have the same issues. You can encrypt your data to prevent access after this type of local attack, of course if you lose your admin account (or someone resets it like this, you won't recover the data)
Bill
Actually my local passwords are encrypted, and I wouldn't dare have it otherwise. Of course, if somewone tried hard enough the encryption could be broken, but since this actually requires someone to be at my PC, then this really doesn't matter.
Originally posted by: JackBurton
EVERYTHING can be hacked! Welcome to the world of zeros and ones.Welcome to the world of Microsoft![]()
Originally posted by: bsobel
Originally posted by: Need4Speed
Welcome to the world of Microsoft![]()
I realize it's cute to MS bash, but do it when it only applies to them. Physical access issue are OS independant, linux and other system have the same issues. You can encrypt your data to prevent access after this type of local attack, of course if you lose your admin account (or someone resets it like this, you won't recover the data)
Bill
Originally posted by: bsobel
Actually my local passwords are encrypted, and I wouldn't dare have it otherwise. Of course, if somewone tried hard enough the encryption could be broken, but since this actually requires someone to be at my PC, then this really doesn't matter.
And so are the XP ones, what was your point? If I mount your file system and replace your password file (basically what is being suggested to fix the xp box here), I don't care what your passwords where or the fact that I can't get at them.
Bill
Originally posted by: wizardLRU
Originally posted by: bsobel
Actually my local passwords are encrypted, and I wouldn't dare have it otherwise. Of course, if somewone tried hard enough the encryption could be broken, but since this actually requires someone to be at my PC, then this really doesn't matter.
And so are the XP ones, what was your point? If I mount your file system and replace your password file (basically what is being suggested to fix the xp box here), I don't care what your passwords where or the fact that I can't get at them.
Bill
Actually, I know that.
