RE: cracking local admin account

[Guest bradm]

There are plenty of "bootable" CD's and floopies allowing a local user to

reset the password.

 

If the 'admin' password has been changed, then you know it has been messed

with. Since the actual machine is not his property, the company should

establish a policy prohibiting any means or method of gaining access by any

means where they are not authorized.

 

What you must first realize, is not only his disregard to authority, but how

much danger he is putting your network in danger. Once a policy is in place,

ensure everyone knows about them by signing a statement of awareness in order

to gain computer privileges. It's one of the first thing we do with new

hires.

 

Then if anyone goes against policy, have management establish punishments.

Anything from counseling to termination. Because of the hazards and

vulnerabilities someone can unknowingly cause by bypassing network security,

where I work it is grounds for immediate termination.

 

Good luck

Brad

 

 

 

 

"spence" wrote:

> I have an employee who apparently has a way of cracking local administrative

> passwords. I just learned of this and he has thus far been using this trick

> "for good" (e.g. to by-pass corporate buracracies that impede productivity.)

> Regardless, I've asked him to cease this practice. However, I'd like to know

> if there's a way to make sure he's no longer able. The problem is that I

> don't know how he's done it except that I was told by a coworker that a

> floppy disk of some sort was invovled. I realize that's scant information to

> go on, but I was hoping that someone might be able to offer some guidance on

> shoring up the security on my PCs.

>

> thanks,

> spence