How to protect and/or hide product key on a desktop?

Hi.

We've run into an interesting situation - is there a way to protect / hide / encrypt a product key on XP Pro SP2?  Basically, what I want to do is prevent someone from downloading a little program to extract the product key from an installed system.  I'm just not sure how to do it, or if it can even be done.

Any help and/or suggestions would be most appreciated.  
LVL 1
navigator010897Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
I bet this can only be done with admin rights. Try to run rockxp for example without admin rights, it will fail.
This is the same for hashed passwords.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
plimpiasCommented:
Like McKnife said. if you give the user non admin rights they wont' be able to do this


Giving users non admin rights is best practice, it the case that users need access to certain things. It is recommended that you enable group policy and set the permissions to the things they needs.

Always work with computers locked down, and unlock the things you need

Never work with computers unlocked, and start locking it down

Meaning non-admin and admin rights.

Along with key extraction there are several other things that the user with admin can do.

Install a sniffer on the networ, extract passwors from the machine, get ALL product keys for the computer, install keyloggers, viruses, spyware......the list goes on

I would recommened like McKnife said that do not give the users admin rights.
0
navigator010897Author Commented:
In most areas of the network, that is how we normally do it.  The problem is, in this particular classroom setting, the students are studying for network certification.  So, due to the rights they require to be able to do some of the labs, this is not necissarily an option.  

Is there another way to prevent the product id from being obtained?
0
Webinar: Miercom Evaluates Wi-Fi Security

It's not just about Wi-Fi connectivity anymore. A wireless security breach can cost your business large amounts of time, trouble, and expense. Plus, hear first-hand from Miercom how WatchGuard's Wi-Fi security stacks up against the competition in our upcoming webinar!

plimpiasCommented:
For classrooms i tend to setup virtual PC's with 180 Day eval license.

Virtual PC is now free

But to answer your questions, no. There are plenty of tools that allow you to extract the already encrypted key.
0
McKnifeCommented:
It is stored encrypted in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DigitalProductId
You could turn on auiting on that registry branch.
Another way would be to delete that key (after saving it). But some applications might need it, at least the wga check.
0
Computer101Commented:
Forced accept.

Computer101
EE Admin
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.