Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: Password Protected Screen Saver and Administrative Password

Subject: RE: Password Protected Screen Saver and Administrative Password
Date: Tue, 8 Feb 2005 19:56:55 -0600

The server is logged in as administrator, with the password
protected screen-saver in place.  I believe the screen-saver
offers some protection (the server room is not secure...it
doubles as a copier room).

When a third party vendor needs to do their "thing," e.g.
maintenance to their program, they need access via GoToMyPC.
If I am not there, I want a trusted co-worker who does not
do administrative duties to simply put in the screen-saver
password.  The vendor does their work, and after a bit,
the screen-saver kicks in again.

I want to give the trusted co-worker a way to unlock the
screen-saver for that period of time, and not have to give
them the administrator password (which Microsoft requires to
unlock the screen-saver).

I think there ought to be a way to unlock the screen-saver
without giving the master key to a trusted co-worker.  The
trusted key can be used to do harm from the trusted co-worker's
PC (it is unlikely that a non-administrator is going to play
around at the console in the computer room).

It's not great, but since I cannot always be present, I need
to use a trusted co-worker to this extent. 


 
Tom Milliner, CPA, MCSE
2404 Summer Place Dr.
Irving, TX  75062
(214) 540-2741
tom.milliner@verizon.net

-----Original Message-----
From: Tyson Leslie [mailto:Leslie.Tyson@colteng.com] 
Sent: Tuesday, February 08, 2005 3:23 PM
To: focus-ms@securityfocus.com
Subject: RE: Password Protected Screen Saver and Administrative Password

You are giving them access to use the server with an administrator
logged in, but you won't tell them the administrator password?

Is that correct?  Or, is the server not logged in, and they need to log
into it?  

        Tyson. 

-----Original Message-----
From: Tom Milliner [mailto:tom.milliner@verizon.net] 
Sent: Monday, February 07, 2005 8:07 PM
To: tom.milliner@verizon.net; focus-ms@securityfocus.com
Subject: Password Protected Screen Saver and Administrative Password

 
 
Does someone know a way to allow a normal user to release a server
password protected screen-saver without giving the user the
administrator password?

I need this so that third-party support can access our server via
GoToMyPC when I am not there.  The password protected screen-saver
blocks them from remote access to fix problems.  I cannot always be
on-site to assist by supplying the screen-saver password.

 
Tom Milliner, CPA, MCSE
tom.milliner@verizon.net




------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
---------------------------------------------------------------------------



---------------------------------------------------------------------------
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>