Link to home
Start Free TrialLog in
Avatar of abacosis
abacosis

asked on

Prevent Boot From CD or Floppy

I want to disallow booting from floppy or CD, is there a way to preventing  booting from a floppy or a CD apart from in the BIOS.  There are BIOS password cracking tools that will crack passwords and allow an intruder to gain access to the BIOS and alter the boot sequence.
Avatar of motherboard
motherboard



ok

you can disable the floppy in the bios and the cd-rom in the bios to.

Also you can disconnect the IDE cables from the drives to stop anyone trying to get access.

Better to remove access physically

mobo
If you do leave the drive in the machine, you will also need to prevent the OS's bootloader from allowing someone at the console to boot from one of those devices.

How to do this depends on your operating system (and may be a non-issue on some).

I agree with motherboard, if you don't need the drives in there, take them out.
Avatar of abacosis

ASKER

motherboard: Hehehehhehe :-) nice suggestion .. but I need access to the floppy and CD-ROM after the OS (win2k) boots up :-) ... wish I didn't need access to those things then I could just remove floppy and CD-ROM
use another bootloader like lilo or grub, both have the possibility to use it's own password for each boot image
ahoffman: Tried lilo and set a password on the floppy image.

The bios password was cracked and the boot sequence changed to floppy ...

which caused the machine to boot from floppy first, since Lilo is loaded after the checks in the Bios, which includes boot sequence
just put lilo on floppy, no bootloader on disk
then boot from this floppy always
This is security by obscurity, but otherwise you need physical protection of floppy and CD
try changing your hardware profiles for the machine in win 2k. you can have 1 that will not use the cd rom and floppy or the one you currently have now.all you have to do is change them or it.
If all the above don't help, I suggest you should get a motherboard with features to disable access to the BIOS through hardware jumper settings in the motherboard.
Thanks for your comments all you guys

But I guess there probably is no solution ...

Or maybe I could write a BIOS virus that will do the trick .. hehhehehe
ASKER CERTIFIED SOLUTION
Avatar of Dave Howe
Dave Howe
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial