what happens on no admin passwords?

[Jan C K]

Hi,

sorry (I searched for it but just found loads of cracking hints) for
such a (probably common) question.

I've got my family's PC here which is to be configured before they'll
use it on their own in future (and probably they won't use things like
"runas")

They've got passwords for their users (though I got to persuade them
of more secure ones).
There are however no passwords for the administrator users, which
won't be used. (as I hope)

My question therefore:
Is that a security problem concerning just online attacks?(assuming
noone will break in our house and steal the PC)

I don't manage to use "runas" for one of the admins. Neither via
"runas" in command line nor via context menu.
Is it possible to login remotely in an admin account without password?
Is it possible to get access to folders (like this smb-stuff. I don't
know what the english word is. This thing you get via right click
(????/security) over lan through one of the admin accounts?

Thanks alot,
Your Jan

 

[Mike Bright MSP]

Jan,

Having an Admin account with a blank password always provides the potential
for an attack. If you have access to the Internet, and don't have a
firewall then yes you are exposing yourself to the likelyness of an attack.
Numerous exploint exist in Windows, which can be used to access and run
programs on your computer. If a Hacker was able to do so and you had a
blank Admin password you would certainly make it easy for them. It really
depends on your security setup as to how secure your PC will be, but having
blank passwords is never a good idea.

Regards

Mike Bright MCP, MSP

e:[email protected]

 

[Jan C K]

Hi,

so I'm making it easier for a possible hacker.
However, it's not just the case that someone can (without hacking)
just log into my PC knowing the (blank) password for an admin user and
the Administrator?
(The Windows Firewall is turned on but no additional firewall is
installed.)

Thanks alot,
Jan