Windows95 and Passwords

Posted on 1999-01-09
Medium Priority
Last Modified: 2010-05-03
Is there a way to write a secure Password Program in windows95? I know that you can press the F8 key and get in via "Safe Mode". There is the Ctrl-Alt-Delete method too. How many backdoors does Windows95 have anyway ? Can this be done, how many backdoors, what is the best way to go if you want to keep virtually everyone out of a personal computer using visual basic 5.0 ? (I know, hackers can get into anything)
Thanks For Any Input !
Question by:stimpe

Expert Comment

ID: 1455162
As for how you are implementing the password checking scheme, I will leave that up to you.  But here are the backdoors I know of if that helps any (and how to close them).

1.Hitting F8 to get boot menu, then going into safe mode

You can disable this by adding the line "BootKeys = 0" to the MSDOS.SYS file.

2. Ctrl-Alt-Delete

This is not really a backdoor.  It only allows you to get around poorly written screen savers.  Most newer screen savers are written to block this.  It wont allow someone from getting past a login password.  However if you are writting your own login then I would suggest disabling this key sequence until after the user is logged in.  At least that way they cant get to the task manager at all.  There is an API call called SystemParametersInfo that does the trick for this.

Possibilities other than writing a custom login

3. Using the Windows Login

You CANT securely use the default login.  It simply cant be secured.  You have to create some kind of proprietary login to actually secure things (you seem to have figured this out already :).

4. Policy Editor

This one is interesting and I have used it before.  It doesnt actually keep anyone out of the system, however it IS possible to make a unrestricted profile for a particular user and then make the defualt user profile so restrictive that a person logging in with any other username cant do ANYTHING but log back out.  But it is very dangerous.  If you forget your password you are pretty much screwed.


Accepted Solution

dpuckett earned 120 total points
ID: 1455163
Your answer is NO, win'95 is not a secure os, nor is FAT or FAT32 secure filing systems, nothing you can do in VB will fix that.

If you want to keep people out of your machine, take it with you.

or, but not as secure..

Install a keylock on-off switch, Set a BIOS boot password, Use a data encryption system like PGP available from pgp.com to encrypt sensitive files and email documents,

del %windir%\yourname.pwl when you leave your machine, your passwords to net resources can be stored there and someone could use it to gain access to network files.

Keep your backup tapes (if you have any) secure.


Author Comment

ID: 1455164
Thanks alot people ! I wondered why there weren't that many good Password schemes out there. I have written one that should keep the everyday user at bay using most of what was discussed. That should just keep the children out. Then again, maybe the adults (tee hee).
Thanks Again

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

When designing a form there are several BorderStyles to choose from, all of which can be classified as either 'Fixed' or 'Sizable' and I'd guess that 'Fixed Single' or one of the other fixed types is the most popular choice. I assume it's the most p…
You can of course define an array to hold data that is of a particular type like an array of Strings to hold customer names or an array of Doubles to hold customer sales, but what do you do if you want to coordinate that data? This article describes…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question