Discussion Locked

NTAccess

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

NTAccess
NTAccess can replace the administrator password of a Windows NT, 2000 or XP system
by rebooting with a special set of boot disks or CD-ROM. I think that this is a huge security risk that is being ignored.
Has anyone used this product?Is there a way to protect against this?

5 replies

by jas03

Where can you get this product? I'm locked out of a win2000 system and I need to install programs that people need for work

by generalist

I've used the product both at work and at home. It works quite well if you need to get into a system when the password is lost or was never known.

As far as protecting against it, if you removed the diskette drive from the machine, you would be able to prevent it from being used without a bit of extra work.

by jackofalltech

I've also used it. I tested it many times on a partition I created just for that purpose before using on a 'production' PC. It works!

It should be company policy that no unauthorized employees have this in their possesion.

Ralph

by deadly ernest

The most secure boot drive against mesing with that i have heard of is a fellow had a specific server located in a shared corporate server computer room. All the 'smart' techies from the other corporate areas thought it was fun hacking everyone else's servers and resetting passwords etc. Luckily they left the system and the operations alone but just made life difficult for the other techs.

On my advice my mate updated and old antivirus trick.

He set the operating system to boot off drive 'C a very small hard drive with only the operating system on it (absolute minimum size 600MB). Thjen everything else was loaded on to drive 'D'. The administrator password file was on drive 'C' all other passwords are on drive 'D'.

Once everything was set up he burnt a copy of the 'C' drive to a CD. Installed a CD player as drive 'C'. The CD player was set so that you ahd to pull the box apart to get at it and the case had a quality case lock. the machine is set with a BIOS password so they cant get in a change it either. Floppy disabled too.

Nothing anyone can do will change the set up operating system or the admin password.

by theven

I think the first thing anyone has to do is place their servers behind locked doors. If a person can get physical access to your server easily, then there are a lot of other issues you need to worry about.

This discussion is closed to new replies.