Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

How do I secure my PC?


  • Please log in to reply

#1
toad boy

toad boy

    New Member

  • Member
  • Pip
  • 1 posts
Hello,

My brother is a tech guy for a local computer shop, and over the last few weeks we have been having this little competition... I know it's all fun and games but it really is improving my knowledge of PCs. My question is what to do next- so far:

I had no password, so he was able to just log on.
I password protected my administrator account, and he got onto a hidden administrator account through safemode.
I searched around here and found out how to disable the hidden administrator account.
He then booted onto the PC with a Live Cd of Linux? Somehow he turned off my password.
Then set a BIOS password and disabled boot from the optical drive without the password, but then he booted from a USB stick.
So then I locked all bootable devices without the password, but he took out the CMOS battery from the motherboard and it erased the BIOS settings...

What's next? Is it even possible to securely lock your PC? What about hard drives... how do I secure those so that if they are removed from the system and booted as a slave drive they wouldn't be accessible? I posted this in the geek talk section because my system is in no real trouble, as it's all just my brother. Thanks for any replies :)

John
  • 0

Advertisements


#2
imafool4u

imafool4u

    Member

  • Member
  • PipPip
  • 95 posts
Password protect your accounts, your Administrator account (accessible only from Safe Mode), your BIOS, then disable booting from Optical Drive before HDD. And put up an electrical fence.
  • 0

#3
Ferrari

Ferrari

    PC SURGEON

  • Member
  • PipPipPipPip
  • 1,939 posts
This is something just around the corner...

PGP Whole Disk Encryption solutions and all new 2010 Intel Core vPro Processors
  • 0

#4
anzenketh

anzenketh

    BSOD Warrior/Computer Surgeon

  • Technician
  • 2,854 posts
You could also look at a program called truecrypt.
  • 0

#5
asmo

asmo

    Member

  • Member
  • PipPip
  • 53 posts
I'd second truecrypt though it can be hard to use if you're new to is but there is a guide: http://www.randyjens...tire-hard-drive

There is also this: http://www.ce-infosy...lish/index.html which is good as well.

Both do the same thing, from a linux Live CD he'll not be able to see anything on the disk.
  • 0

#6
Troy

Troy

    Tech Staff

  • Technician
  • 8,841 posts
Also most computers (desktops) have a slot somewhere where you can fit in a padlock of some sort... Get the best one that aint gonna break easy... That'll help!
  • 0

#7
artm12

artm12

    Spammer

  • Banned
  • PipPip
  • 51 posts
HI Friends,
For set up a new user account on your computer. Use the Account Manager tool found in the control panel to do this. Once the new account is set up, you can then log into your computer. Using the “CTRL-ALT-DEL” key combination in Windows XP bring up the network security box. Just click on the “Lock Workstation” button and your computer is now protected. Only you can remove the lock by entering your password.

Thanks,
James
  • 0

#8
Troy

Troy

    Tech Staff

  • Technician
  • 8,841 posts
That's easily bypassed as mentioned in post #1, I'm obviously not going into detail. Although you'd want to have someone with some serious skills who desperately wants to get the data off your computer for it to be done.

However for the most part locking the computer when you are away from it is a good idea.
  • 0

#9
SpywareDr

SpywareDr

    Member 3k

  • Member
  • PipPipPipPipPipPip
  • 3,784 posts
FWIW ...

Hardware-based whole disk encryption via fingerprint reader. (FIPS 140-2 certification). In other words, in order to boot the computer and/or access the encrypted hard drive requires a swipe of a valid fingerprint. BTW, all of this works before any operating system is allowed to boot up. This option is available on Lenovo ThinkPad T, R, X and Z series notebooks.
  • 0

#10
Troy

Troy

    Tech Staff

  • Technician
  • 8,841 posts
Wouldn't want to get your finger chopped off... :)
  • 0

#11
SpywareDr

SpywareDr

    Member 3k

  • Member
  • PipPipPipPipPipPip
  • 3,784 posts
:)
  • 0

#12
admin

admin

    Founder Geek

  • Administrator
  • 24,575 posts
If someone has physical access to your computer, it's almost impossible to prevent access except through encryption. Notebooks like the Lenovo use hardware encryption in conjunction with a special BIOS to prevent access. If you have Windows Vista, or Windows 7 Bitlocker would be a good option. :)
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP