Locking Windows 95? 2

[mozingod]

Is there a cheap/free utility to make Windows 95 behave like NT/2000, where it won't let you on to the local machien if you cancel out of the login screen? Our security auditor didn't like the fact that it behaved like that, and I only want to resort to BIOS passwords as a last resort, as those become a pain in the you know what later on in the PCs life. Thanks!

Darrell Mozingo

 

[jrbarnett]

I don't know of any way, but if you are in an environment where security is of a concern I would seriously consider changing to Windows NT4, 2000 or XP Professional.

Remember that if there is any data on the hard drive, it can be accessed via a boot floppy disk or CD's under computers running those operating systems, which will bypass any security measures that you put in place.

John

 

[mozingod]

Good points. We're not ruling out upgrading to 2000, but it's for a hand full of older machines that we'd rather not upgrade (hardware of software) at the moment if possible, so I thought I'd check into alternate methods here first. Perhaps we will set the BIOS password until we're ready to upgrade. Thanks.

Darrell Mozingo

 

[wolluf]

There is a registry setting/policy which can stop users cancelling out of login (can't remember the key - its been posted several times here - value something like 'mustbevalidated' - or if this is domain, can set a policy for this). However, John pointed out the lack of security - (95 is just not a secure operating system), so bios password might be best bet till upgrade.

 

[jrbarnett]

If you choose to implement a BIOS password, your next security problem will be somebody opening the case up and removing the hard drive - if you are so concerned about it I would consider a security lock to ensure it stays shut.

John

 

[mozingod]

We're not worried about going that far. The casual ability to escape out of the login dialog and get to local data is what worried us most.

Darrell Mozingo

 

[BeenThereDoneThat]

mozingod:

Here is a page that might be what your are looking for:

http://security-tips.com/cancel-logon-1.htm

 

[mozingod]

BeenThereDoneThat: Thanks! Just the simple fix I was looking for.

Darrell Mozingo

 

[mattjurado]

You can also try workstation lock from posum software.

http://www.posum.com

Matt

 

[mattjurado]

Forgot to mention one thing, you can always bypass these lockout methods by booting to safe mode, in case you didn't realize that.

Matt

 

[wolluf]

Just in case (here's the entry I couldn't remember) - alternative to other solution.

HKEY_LOCAL_MACHINE\Network\Logon
Add this Dword : "MustBeValidated" with value "1"

 

[Jomama46]

You could set the screen saver password. of course it can be defeated by a reboot. But if youre just concerned about someone casually walking by your station and tinkering, this may be the simple way. HTH

Jomama

 

[mozingod]

Thanks wolluf... I did a search a little bit ago and got. That worked like a charm!

Darrell Mozingo