• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 191
  • Last Modified:

basic question: what happens if my machine is stolen?

I know this is basic, but I'm a little confused. I'm hearing different things from different people. I'm hoping someone can clear this up for me.

Here's the scenario: I've got a machine running XP pro, users must login to use it, hard drive is formatted NTFS.

Here's the question: if the machine is stolen, can the files be accessed? I understand you'd have to hack the password in order to get on the machine, but would it be possible to take the hard drive out, set it as a slave on another machine and access the files that way?
1 Solution
yes, it would be possible. The thief could assume ownership of any permissions you set. There are also 3rd party tools to help do this.

Very possible as stated above. If this is a concern of yours you might check in to removable storage devices. I recommend that to those with roommates, etc.
The quickest and easist would be for them to change the Administrator password.  

There are utilities (Linux Boot / Password Recovery) that without removing the Hard drive, a person could change the administrator account within a matter of minutes and have full access to the hard drive and the data as well.

Cyber Threats to Small Businesses (Part 2)

The evolving cybersecurity landscape presents SMBs with a host of new threats to their clients, their data, and their bottom line. In part 2 of this blog series, learn three quick processes Webroot’s CISO, Gary Hayslip, recommends to help small businesses beat modern threats.

hullc65203Author Commented:
Can I setup encryption on this drive? Doesn't XP have the ability to make files private?
Hello hull,

if your computer is stolen, you lost all your data no matter if it's encrypted or decrypted because, administrator's password of windows xp can be easily resetted, and admin can take ownership of files aswell as decrypt file.
The only way I can think is that you keep your confidential data into a zip or RAR archive and protect it with long password
My suggestion would be for mobile devices like laptops, to use some type of encryption other than Windows Encryption, I use Cryptainer LE, its free for 25MB of space.  Users could store all sensitive data on this secure "drive", and if the machien is stolen, its highly unlikely anyone will be able to get into your files.  They would be able to logon to the machine, but not much else.  Unfortunately, until more advances in mobile device security become more widespread and affordable, like fingerprint scanners, etc, there isn't much that you can do.  

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now