Password Protection

[RN1]

I am working on WinXP Pro SP2. My PC is password protected but if I am
not mistaken, I believe password protection can be disabled by going
to the BIOS (by keeping the Del key pressed on the keyboard when the
PC starts), isn't it?

If that's indeed how password protection can be disabled in WinXP, is
there any way to stop others from disabling password protection (maybe
by making BIOS password protected so that for entering BIOS, one has
to enter a password to access the BIOS)?

Thanks,

Ron

 

[Malke]

I am working on WinXP Pro SP2. My PC is password protected but if I am
not mistaken, I believe password protection can be disabled by going
to the BIOS (by keeping the Del key pressed on the keyboard when the
PC starts), isn't it?

If that's indeed how password protection can be disabled in WinXP, is
there any way to stop others from disabling password protection (maybe
by making BIOS password protected so that for entering BIOS, one has
to enter a password to access the BIOS)?

General computer security information:

Any computer running any operating system can be accessed by someone with 1)
physical access; 2) time; 3) skill; 4) tools. There are a few things you
can do to make it a bit harder though:

1. Set a password in the BIOS that must be entered before booting the
operating system. Also set the Supervisor password in the BIOS so BIOS
Setup can't be entered without it.

2. From the BIOS, change the boot order to hard drive first.

3. Set strong passwords on all accounts, including the built-in
Administrator account.

4. If you leave your own account logged in, use the Windows Key + L to lock
the computer (and/or set the screensaver/power saving) when you step away
from the computer and require a password to resume.

5. Make other users Limited accounts in XP Home, regular user accounts in XP
Pro.

6. Set user permissions/restrictions:

a. If you have XP Pro, you can set user permissions/restrictions with Group
Policy (Start>Run>gpedit.msc [enter]) but be careful. Using the Policy
Editor can be tricksy. Questions about Group Policy should be posted in its
newsgroup: microsoft.public.windows.group_policy.

b. If you have XP Home, you can use MVP Doug Knox's Security Console or the
MS Steady State. SteadyState also works in XP Pro if you'd rather not use
Group Policy.

http://www.dougknox.com
Steady State -
http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspx

Malke

 

[Pegasus \(MVP\)]

I am working on WinXP Pro SP2. My PC is password protected but if I am
not mistaken, I believe password protection can be disabled by going
to the BIOS (by keeping the Del key pressed on the keyboard when the
PC starts), isn't it?

If that's indeed how password protection can be disabled in WinXP, is
there any way to stop others from disabling password protection (maybe
by making BIOS password protected so that for entering BIOS, one has
to enter a password to access the BIOS)?

Thanks,

Ron

When you write "My PC is password protected" then it is unclear
if you're referring to a ***Windows*** password or a BIOS
password. BIOS passwords have nothing at all to do with Windows
passwords, and the BIOS cannot disable a Windows password.

You can "protect" your PC by setting a BIOS password. Read
the manual that came with your PC to see how it's done. You
should be aware of these points:
- People who use BIOS passwords sometimes forget them.
This can be a big problem with laptops - resetting a BIOS
password is often a major challenge.
- A BIOS password offers no protection at all if the PC/Laptop
gets stolen. It's an easy job for a thief to remove the disk and
connect it to some other PC to access your files.

WinXP offers unbreakable file encryption. Click Start / Help,
then look for help on "encryption". Before you implement it,
make sure you are completely familiar with it. It is common
for people to post here because they can no longer decrypt
their files, e.g. after restoring files from backup.

 

[HeyBub]

Nothing in the BIOS changes your XP password protection.

The only password option in the BIOS is to set a password to access
the BIOS... many a person has accidentally been locked out of the BIOS
by losing that password. It can be deleted, but not without
physically getting inside the PC.

Right. Usually by removing the battery and re-inserting it.

There are locks for the PC's cabinet that can significantly delay physical
access to the motherboard.