12/31/2022 0 Comments Eboostr settings.iniControlling the ability to gain admin access is not as simple as renaming the account. Don’t get so wrapped up in locking the door that you forget about the window being left wide open. True, leaving it named Administrator is a bad idea, but that’s only one piece of the puzzle. The intorwebz are full of instructions and you don’t need black hat level skill. Why? Because unless you also secure the BIOS to NOT allow booting from USB devices without the appropriate BIOS password - any bozo with Physical access, a Stick and Hirens (or any of a myriad of similar programs) can boot the machine into a Linux distro, reset the password of whatever local account is on the machine (REGARDLESS of the name on it), and gain admin access to the workstation with ZERO skills in a matter of minutes. Security by obscurity (renaming the Administrator account) is only somewhat effective. My initial question really (not wanting to waste peoples time) is can this be done or am I living in a fantasy realm
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |