Click here to get back home

Computer Account Password
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Computer Account Password inteltech 11-06-2007
Posted by DevilsPGD on November 12, 2007, 8:01 pm
Please log in for more thread options
>Consider the risk of computer authentication: if I can get image of the
>workstation (no need to steal a laptop - just get an image), I can get
>access to your wireless network. The mitigation if full disk encryption.

Are your images typically joined to a network? Or are you talking about
a backup-style image (something done after the initial configuration of
the machine)?

Posted by S. Pidgorny on November 14, 2007, 4:30 am
Please log in for more thread options
 The backup-style images.

Usually organisations consider laptop theft scenario (if anything). But if
the objective is to connect to internal network< the intruder only needs few
minutes and physical access to the laptop's hard drive.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

>
>>Consider the risk of computer authentication: if I can get image of the
>>workstation (no need to steal a laptop - just get an image), I can get
>>access to your wireless network. The mitigation if full disk encryption.
>
> Are your images typically joined to a network? Or are you talking about
> a backup-style image (something done after the initial configuration of
> the machine)?



Posted by DevilsPGD on November 14, 2007, 7:33 pm
Please log in for more thread options

>The backup-style images.
>
>Usually organisations consider laptop theft scenario (if anything). But if
>the objective is to connect to internal network< the intruder only needs few
>minutes and physical access to the laptop's hard drive.

Assuming the drive isn't encrypted to begin with -- If the drive isn't
encrypted and the attacker has physical access, it's game over.

Similar ThreadsPosted
badPasswordTime for computer account April 5, 2006, 12:39 pm
DOMAINSEND computer account August 10, 2007, 12:37 pm
Problem with Domain Computer account December 18, 2006, 2:46 pm
Adding Computer account to folder security March 20, 2006, 9:19 am
PCs still function on domain with computer account disabled June 14, 2006, 3:51 pm
Computer Account Changed, by NT AUTHORITY\ANONYMOUS LOGON?! July 3, 2006, 1:48 pm
Account lock out when accessing computer management remotely September 27, 2006, 11:32 am
Excessive computer account logon/logoff loggining on security log September 12, 2006, 5:23 am
User account - password attribute ? February 21, 2006, 4:23 pm
Maximum machine account password age March 14, 2006, 6:24 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap