Link to home
Start Free TrialLog in
Avatar of george82
george82

asked on

Accessing corporate laptop after employee stops working for the company (laptop not registered in domain)

Company buys laptop for employee.

Employee uses the laptop to work on company's files

Employee stops working for the company.

Files are still copied on the company's file-servers, however the employee should not have access to the company's files after he stopped working for the company.

This laptop was bought before the domain deployment, and was used as such only in workgroup environment. laptop is not part of a domain, only has local user profile.

Given that the employee is still using the laptop for his own use, and that we can reach him over e-mail (outlook/exchange), here is the question:

1) is there any way to gain access to this laptop over the internet? ideally we should be able to see what is stored in the laptops hard drive and interact.
Any server/client "backdoor" software would work, like Radmin.

2) if 1 is not possible, what is the fastest way to do a zero-fill/low level format of the laptop hard drive?
I recall a small utility called Hard Drive Killer Pro what would somehow "kill" the hard drive not allowing access to data. was available at http://web.archive.org/web/20070312013254/www.hackology.com/programs/hdkp/ginfo.shtml

Avatar of Irwin W.
Irwin W.
Flag of Canada image

  1. Files are still copied on the company's file-servers, however the employee should not have access to the company's files after he stopped working for the company.
    "
    • If you have NTFS volumes on your server(which you should) deny the user permission to any of the shares
  1. "is there any way to gain access to this laptop over the internet? ideally we should be able to see what is stored in the laptops hard drive and interact.
    Any server/client "backdoor" software would work, like Radmin."
    • This is where your company may have to bite the bullet.  Since I assume the laptop is not the company's property, it is going to be difficult to have the user give you access since they are no longer with the company.
    • There really is no method for you to access to laptop as you probably have something like Team Viewer or Radmin installed.  
    • The other issue is that you do not have a public IP in which to connect to the laptop over the internet(or do you?)
Avatar of george82
george82

ASKER

nappy_d, thanks for quick response

As i mentioned, company bought the laptop, for the employee to use, so it is company's property.

user has now been denied on the shares, but we are concerned with the files that are already saved on the laptop's hard drive.

3) we could find out the public ip when he will connect to the exchange server again, his email account is still active.
ASKER CERTIFIED SOLUTION
Avatar of Irwin W.
Irwin W.
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial

Yes - Company's management understands that there is no guarantee any solution will work-however they want to be sure that they do whatever is possible to minimize the chances for him to run away with the data.

I'm wondering if there is any way in Exchange server 2003, to issue a "remote-wipe" command for the laptop, similar to the one used for smartphones: http://msexchangeteam.com/archive/2005/07/07/407416.aspx
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thank you both