Windows Forum

Ask something
Discussion Locked

Password not encrypted....?

0 helpful
5 replies

by pete self

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Question about the automated response file in Windows 2000...I used the Wizard to create a response file. I then looked at the .txt and .bat files to see what type of
structure they consisted of. Why did Microsoft not encrypt the Administator
password in the .txt and .bat files? Could this possibly leaves your network open
to hacks if someone gains access to these two files, wide open administrative access
if you know what I mean. It just seems they would have seen this as an opportunity for bad things to happen.

5 replies

by johnyboy

In the resource kit it tells you its not encrypted and suggests you change it after you installed the workstation. I know its not ideal but if thats the only drawback to having auto install then its not all bad.

by oridjinn

The reason for this is because the unattended install file is only showing the local administrator password. MS expects you to first, run the unattended files from a floppy (rename unattend.txt to winnt.sif) and when it shows "Booting from CD...) pop in the floppy, then Windows 2000 will automatically see the winnt.sif file and install Windows 2000 automatically with the answer file and without any switches. MS also expects that the unattend.txt or winnt.sif will reside on the floppy and be held by the admins only. Since the file is only used for a local install, you don't have to worry about a security risk as long as you keep the disk with you. As far as the bat file, the password is not listed here, it only serves as a pointer to the answer file, and again, you don't have to use the batch file if you are installing from CD and rename the unattend.txt to winnt.sif. If you are upgrading and using the unattend.bat and .txt, run these from the floppy, you will still have a safe copy that only you control. If you are running the unattended install from a network location, maybe you should consider RIS.

by pete self

Very informative and I appreciate the great feedback, but so much for "unattended" installs.

This discussion is closed to new replies.