Keep my Brother off WinXP!

[Guest]

I am helping a friend set up her home network. They have 2 Desktops and a
laptop. The new desktop is off limits to one of the siblings, but no matter
how hard I / we try, we cannot keep him off of it.

He has no WinXP user, but has gotten through somehow. I can assume he has
done some research online and figured out how to use a boot disk to reset the
SAM file, though all passwords were intact when i went back on. What to do?

When he gets on he installs a lot of DVD copying software. Is there a way
to block specific programs from being installed? a registry key that will
cause the specific installation to crash or not complete?

Also, he will be sharing the household wireless network, on a 300kbps DSL
line (not much), and he will inevitably hog all the bandwidth night and day.
Is the a software or hardware solution that i can install on his computer or
somewhere else on the network so limit his bandwidth usage?

(all computers using WinXP, soon to be SP2)

THANKS for any help!

Greg

 

[Carey Frisch [MVP]]

You can open the computer's BIOS and set a password.

Setting a BIOS Password
http://www.lockdown.co.uk/?pg=biospsw&s=articles

==> Accessing Motherboard BIOS
==> http://www.michaelstevenstech.com/bios_manufacturer.htm

Also see:

Doug's Windows XP Security Console
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

[Courtesy of MS-MVP Doug Knox]

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx

------------------------------------------------------------------------------------------

:

| I am helping a friend set up her home network. They have 2 Desktops and a
| laptop. The new desktop is off limits to one of the siblings, but no matter
| how hard I / we try, we cannot keep him off of it.
|
| He has no WinXP user, but has gotten through somehow. I can assume he has
| done some research online and figured out how to use a boot disk to reset the
| SAM file, though all passwords were intact when i went back on. What to do?
|
| When he gets on he installs a lot of DVD copying software. Is there a way
| to block specific programs from being installed? a registry key that will
| cause the specific installation to crash or not complete?
|
| Also, he will be sharing the household wireless network, on a 300kbps DSL
| line (not much), and he will inevitably hog all the bandwidth night and day.
| Is the a software or hardware solution that i can install on his computer or
| somewhere else on the network so limit his bandwidth usage?
|
| (all computers using WinXP, soon to be SP2)
|
| THANKS for any help!
|
| Greg

 

[Lanwench [MVP - Exchange]]

I am helping a friend set up her home network. They have 2 Desktops
and a laptop. The new desktop is off limits to one of the siblings,
but no matter how hard I / we try, we cannot keep him off of it.

BIOS password may help. But it isn't foolproof if he can remove the mobo
battery.
Note: "There are seldom good technological solutions to behavioral
problems". Keep him away from the laptop. Keep it locked in another room. If
he screws around with it, ground him.

He has no WinXP user, but has gotten through somehow. I can assume
he has done some research online and figured out how to use a boot
disk to reset the SAM file, though all passwords were intact when i
went back on. What to do?

When he gets on he installs a lot of DVD copying software. Is there
a way to block specific programs from being installed? a registry
key that will cause the specific installation to crash or not
complete?

Also, he will be sharing the household wireless network, on a 300kbps
DSL line (not much), and he will inevitably hog all the bandwidth
night and day. Is the a software or hardware solution that i can
install on his computer or somewhere else on the network so limit his
bandwidth usage?

A hardware firewall appliance like a Sonicwall could probably do this...

Note that if he puts crap - viruses, malware, whatnot - on another computer
on this network, and the other computers aren't firewalled, he's
compromising them, too. Again, this is a 'social engineering' issue more
than a technical one. A computer is not a birthright - if he isn't behaving,
take all access away.

 

[Jupiter Jones [MVP]]

There is no security without physical security
If he has physical access, there is little you can do.
This is not a limitation of Windows but a basic fact of all computer
systems regardless the operating system.
Supervision, locks & keys etc may be required.

Do all accounts have STRONG passwords?
Is the hidden Administrator account password protected?
http://www3.telus.net/dandemar/private.htm