boot from floopy or cd to start windows?

[jim berryman]

Is there a way to require a floppy disk or boot cd to start up windows 2000?
The situation is that I have a computer in my company that we need to
control entry to and would like to find a way to issue a floppy or boot cd
to users to log onto windows with and then they would return it to a control
officer. We are on a domain and the computer is used to access a web
program. My boss says he has seen this before but I have never seen this.

Thank You,
Jim

 

[Pegasus \(MVP\)]

Is there a way to require a floppy disk or boot cd to start up windows 2000?
The situation is that I have a computer in my company that we need to
control entry to and would like to find a way to issue a floppy or boot cd
to users to log onto windows with and then they would return it to a control
officer. We are on a domain and the computer is used to access a web
program. My boss says he has seen this before but I have never seen this.

Thank You,
Jim

This is fairly easy:

- Start Win2000
- Format a floppy disk
- Copy the following hidden files to the floppy:
c:\ntldr
c:\ntdetect.com
c:\boot.ini
- Leave the floppy disk in the disk drive
- Reboot your machine. Win2000 should start as usual.
- Move the following hidden files into c:\BootFiles
(you must first create this folder):
c:\ntldr
c:\ntdetect.com
c:\boot.ini
- Remove the floppy disk
- Restart the machine. It will no longer boot, unless you
insert the floppy disk.

Keep in mind that it is fairly easy to get around this
restriction, if somebody knows what he's doing.

To restore the machine to its previous condition, simply
move the files from c:\BootFiles back to C:\.

 

[Mark V]

Jim wrote in

Thanks Pegasus

[ ]

Of course the user with the diskette might just do a Diskcopy and make
their own copy...

You might look into 3rd-party utilities to password-protect the disk
and/or require a physical "key" to boot it. Some exist that could be
stored on a USB "plug this in to boot up" device. Not my area though
for any pointers.

 

[Pegasus \(MVP\)]

Jim wrote in

Thanks Pegasus

[ ]

Of course the user with the diskette might just do a Diskcopy and make
their own copy...

You might look into 3rd-party utilities to password-protect the disk
and/or require a physical "key" to boot it. Some exist that could be
stored on a USB "plug this in to boot up" device. Not my area though
for any pointers.

Good point.

A somewhat more secure way to lock a machine involves
setting a BIOS password. If you do this then you must be
careful to record the password in a safe place. I have dealt
with numerous machines that had a BIOS password, and
nobody remembered what it was.

 

[CyberDroog]

A somewhat more secure way to lock a machine involves
setting a BIOS password. If you do this then you must be
careful to record the password in a safe place. I have dealt
with numerous machines that had a BIOS password, and
nobody remembered what it was.

The motherboard should have a jumper to clear the password.

To add another suggestion. How about a key card system? A boot diskette
can be copied. A BIOS password can be leaked. A key card is more
difficult to copy.

 

[Pegasus \(MVP\)]

The motherboard should have a jumper to clear the password.

Many motherboards do. Some don't. With some motherboards
you can remove the battery. With some you cannot.

 

[Mark V]

Pegasus (MVP) wrote in

Many motherboards do. Some don't. With some motherboards
you can remove the battery. With some you cannot.

The OP stated a "company system" that is presumably secure enough
physically for the limited general access. I'll guess any passord
scheme is out due to unauthorized reuse of the given current passord.
Key Card, USB "card" etc. (a physical but non-copyable token) is
likely the best way to go.

If in a Domain, perhaps a scripted Account change to "Permitted to
logon from xxx" might be another idea for the admins to consider. If
they use Domain account logons of course. Just spit-balling...