Solved

Windows95 and Passwords

Posted on 1999-01-09
3
176 Views
Last Modified: 2010-05-03
Hello:
Is there a way to write a secure Password Program in windows95? I know that you can press the F8 key and get in via "Safe Mode". There is the Ctrl-Alt-Delete method too. How many backdoors does Windows95 have anyway ? Can this be done, how many backdoors, what is the best way to go if you want to keep virtually everyone out of a personal computer using visual basic 5.0 ? (I know, hackers can get into anything)
Thanks For Any Input !
0
Comment
Question by:stimpe
3 Comments
 
LVL 5

Expert Comment

by:heathprovost
ID: 1455162
As for how you are implementing the password checking scheme, I will leave that up to you.  But here are the backdoors I know of if that helps any (and how to close them).

1.Hitting F8 to get boot menu, then going into safe mode

You can disable this by adding the line "BootKeys = 0" to the MSDOS.SYS file.

2. Ctrl-Alt-Delete

This is not really a backdoor.  It only allows you to get around poorly written screen savers.  Most newer screen savers are written to block this.  It wont allow someone from getting past a login password.  However if you are writting your own login then I would suggest disabling this key sequence until after the user is logged in.  At least that way they cant get to the task manager at all.  There is an API call called SystemParametersInfo that does the trick for this.


Possibilities other than writing a custom login

3. Using the Windows Login

You CANT securely use the default login.  It simply cant be secured.  You have to create some kind of proprietary login to actually secure things (you seem to have figured this out already :).

4. Policy Editor

This one is interesting and I have used it before.  It doesnt actually keep anyone out of the system, however it IS possible to make a unrestricted profile for a particular user and then make the defualt user profile so restrictive that a person logging in with any other username cant do ANYTHING but log back out.  But it is very dangerous.  If you forget your password you are pretty much screwed.

Heath
0
 
LVL 1

Accepted Solution

by:
dpuckett earned 30 total points
ID: 1455163
Your answer is NO, win'95 is not a secure os, nor is FAT or FAT32 secure filing systems, nothing you can do in VB will fix that.

If you want to keep people out of your machine, take it with you.

or, but not as secure..

Install a keylock on-off switch, Set a BIOS boot password, Use a data encryption system like PGP available from pgp.com to encrypt sensitive files and email documents,

del %windir%\yourname.pwl when you leave your machine, your passwords to net resources can be stored there and someone could use it to gain access to network files.

Keep your backup tapes (if you have any) secure.

0
 

Author Comment

by:stimpe
ID: 1455164
Thanks alot people ! I wondered why there weren't that many good Password schemes out there. I have written one that should keep the everyday user at bay using most of what was discussed. That should just keep the children out. Then again, maybe the adults (tee hee).
Thanks Again
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many ways to remove duplicate entries in an SQL or Access database. Most make you temporarily insert an ID field, make a temp table and copy data back and forth, and/or are slow. Here is an easy way in VB6 using ADO to remove duplicate row…
When trying to find the cause of a problem in VBA or VB6 it's often valuable to know what procedures were executed prior to the error. You can use the Call Stack for that but it is often inadequate because it may show procedures you aren't intereste…
Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…
Show developers how to use a criteria form to limit the data that appears on an Access report. It is a common requirement that users can specify the criteria for a report at runtime. The easiest way to accomplish this is using a criteria form that a…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question