Is there any way past windows XP Logon

[Pete Plumb]

My laptop has fallen in to the wrong hands. I can manage
without the data on the hard drive, but would not be
happy if any body else could view the data. The main
Administrator account is passworded, there are two admin
accounts with passwords and on user account without a
password.

Both of the admin accounts have there documents folders
made private. Is there any way that the files in these
folders can be viewed by any one without the passwords?

Thanks
Pete

 

[Colin Nash - [MVP]]

Unfortunately, yes the Windows passwords can be easily bypassed. For
someone with a bit of knowledge, this is pretty trivial to do. For example,
I can do it in about 5 minutes given physical access to the machine. This
is common to any operating system, such as Linux: there is no security
without physical security.

They don't even need to 'crack' the password. They can load the hard drive
into another system and view the files, or delete certain files on the hard
drive that basically reset the passwords to blank.

For stronger security, you really need to use encryption (such as the
Encrypting File System feature of XP-Pro Edition or a third party product
like SafeGuard Easy.)

 

[Aaron]

Is this Windows XP Pro or Home?

My laptop has fallen in to the wrong hands. I can manage
without the data on the hard drive, but would not be
happy if any body else could view the data. The main
Administrator account is passworded, there are two admin
accounts with passwords and on user account without a
password.

Both of the admin accounts have there documents folders
made private.

Is there any way that the files in these
folders can be viewed by any one without the passwords?

Do you mean encrypted (BTW it is only XP Pro that supports encryption)?

Basically unless you are using XP PRO and are using Encrypted File System
(AND export/delete the private key), then it is VERY easy to run a password
cracker and get access to the drive.

Assuming that this is XP home and the person that has the laptop now has any
level of technical competence, he will probably be able to get access to
the data

Aaron

 

[Roger Abell]

You should believe that anything on the stolen system
that was not EFS encrypted has been seen by now.

 

[Drew Cooper [MSFT]]

Colin and Roger already answered your question, but I'd like to add this:

Not only could someone have seen your files, but your laptop could also have
a trojan now. If you suspect that someone could have trojaned your machine
you might want to back up your files, scrub the drive, and reinstall.

 

[Big]

I realy need some help i have XP home and i have one accnt on it a
admin and the password i thought i put as pass dont work in loggon
realy need to get this pass so i can logg on now i have anothe
hardrive with xp on it. can i set the one dirve as slave' then go int
it and find the password please some one help me thanks alot Aaro

*Colin and Roger already answered your question, but I'd like to ad
this:

Not only could someone have seen your files, but your laptop coul
also have
a trojan now. If you suspect that someone could have trojaned you
machine
you might want to back up your files, scrub the drive, an
reinstall.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers n
rights.

My laptop has fallen in to the wrong hands. I can manage
without the data on the hard drive, but would not be
happy if any body else could view the data. The main
Administrator account is passworded, there are two admin
accounts with passwords and on user account without a
password.

Both of the admin accounts have there documents folders
made private. Is there any way that the files in these
folders can be viewed by any one without the passwords?

Thanks
Pete

Bi