Solved

safely remove personal data from DELL Latitude E4610

Posted on 2015-01-11
19
216 Views
Last Modified: 2016-11-23
has a laptop DELL Latitude E4610 whom the user wanted to remove his personal data from the laptop before returning to the company. he does not remember his logon password. what are the workarounds (besides removing the hard disk) to be able to see the laptop data without knowing the logon password?
0
Comment
Question by:grnow
  • 4
  • 4
  • 3
  • +5
19 Comments
 
LVL 18

Expert Comment

by:awawada
Comment Utility
0
 
LVL 90

Expert Comment

by:John Hurst
Comment Utility
Run killdisk or like and format the machine a couple of times.

If the user is not allowed to do this, then the user needs the password. No miracles here.

Ask the company to remove personal data. Most (hardly all) companies are honorable.
0
 
LVL 18

Assisted Solution

by:web_tracker
web_tracker earned 100 total points
Comment Utility
If you only want to remove the user password it is hard to remove it without having the user's password and not removing the hard drive and connecting to an external device. You can use self booting discs to wipe the whole drive, but I am sure that is not what your client wants. You can try booting to a self booting disc such as the Ultimate boot disc, and try to wipe the user profile that way, as there are some wiping utilities on this disc. https://www.ultimatebootcd.com/
0
 
LVL 62

Expert Comment

by:☠ MASQ ☠
Comment Utility
Although it's possible to get into the system you should bear in mind that strictly the laptop doesn't belong to them and is the property of their company - who may not take kindly to their corporately imaged machines being wiped by a third party.

Chances are in reality they probably won't mind and DBAN is as good a route as any to flatten it but just pointing out a potential issue.
0
 
LVL 70

Expert Comment

by:garycase
Comment Utility
Assuming you don't want to wipe the machine, I'd just remove the hard drive (I know you said you didn't want to do that, but I assume you were referring to removing and wiping it);  attach it to another system; "take ownership" of the user's files; and then delete them all.

Then just replace the hard drive.    The user's account will still be there; but the data won't :-)
0
 
LVL 37

Expert Comment

by:Gerwin Jansen
Comment Utility
Since this is about a company laptop, do you know if the hard drive is encrypted? If it is encrypted with for example BitLocker then without password there is nothing you can do to get to the personal data. What about just asking for a password reset and then cleanup that data?
0
 

Author Comment

by:grnow
Comment Utility
Thanks for all the ideas. DBAN is good if the laptop is personal. the user says getting the company IT to help reset the password is impossible. For Ultimate Boot CD, which option is the one to select to be able to see the partitions folders etc. Would be we able to run some Linux OS to boot from the CD to see the folders?
0
 
LVL 70

Accepted Solution

by:
garycase earned 150 total points
Comment Utility
You can boot to Knoppix and see the user's folders.  [Unless, of course, the data happens to be encrypted, as noted above.   If that's the case you're simply out of luck -- the only way to remove it in that case without the password is to simply wipe the drive.]
0
 
LVL 91

Assisted Solution

by:nobus
nobus earned 200 total points
Comment Utility
on the UBCD, you may want to run the nordahl's offline password registry editor
find it in the /HDD/Data Recovery section
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 37

Expert Comment

by:Gerwin Jansen
Comment Utility
>> company IT to help reset the password is impossible
Then we have to conclude that the user is no longer working for the company or is not allowed access to company resources for some other reason. If a Linux boot CD or password reset does not work, just wipe the drive. Companies can easily re-image the laptop and the user is sure that no personal data is ending up with the company.
0
 
LVL 18

Expert Comment

by:web_tracker
Comment Utility
It is possible that the IT department changed the user's password to prevent the user from accessing their network with the laptop, that may be the reason the user maybe saying he may have forgot the password. Wiping the drive may put the person in hot water, but since the user is no longer part of the company what can they do fire him... he already no longer works for the company. You can either wipe the drive or put in another drive of the same size.   That would be the quickest as Dban takes many hours to run depending on the wipe type and the size of the drive. If your time is valuable just replace the drive. Then it is totally impossible for anyone to recover the person's data.
0
 

Author Comment

by:grnow
Comment Utility
changing to a new hard disk would be another option ideal if the company is ok with it. tried with UBCD nordahl's offline password registry editor and pcloginnow.. it seems to just hang on the screen. tried to boot with Linux Mint, can see the partition drives data. how to ensure that the data deleted from the hard disk is non recoverable?
0
 

Author Comment

by:grnow
Comment Utility
is there anyway to reset the user password once logged into linux mint for e.g?
http://www.linuxmint.com/download.php
0
 
LVL 18

Expert Comment

by:web_tracker
Comment Utility
You can not ensure the data is deleted unless you can log into the computer. the utilities that come with UBCD, wipe the whole drive, you can not wipe only specific files or folders with this basic applications.
0
 
LVL 91

Assisted Solution

by:nobus
nobus earned 200 total points
Comment Utility
>>  how to ensure that the data deleted from the hard disk is non recoverable?   <<  then you need to run something like BCWipe :  http://www.jetico.com/products/personal-privacy/bcwipe/
you can run this when the disk is attached as 2nd drive to a running PC
0
 
LVL 37

Assisted Solution

by:Gerwin Jansen
Gerwin Jansen earned 50 total points
Comment Utility
>> if the company is ok with it
What is allowed by the company? That is the main question here I guess. If  you answer that question you can make a choice of the options already give above. You already know that you cannot get a new password for the user. Whether you are allowed to wipe/replace/remove the drive is the question that you need to get answered.
0
 

Author Comment

by:grnow
Comment Utility
finally manage to take a look at the user pc. tried out booting with linux cd realized the cd drive is not working. last option but to remove the hard disk and emphasize to user to only retrieve or delete personal data. most of the company info is left intact and user is relieved she retrieved some family photos from it.
0
 
LVL 91

Expert Comment

by:nobus
Comment Utility
tx for feedback
0
 
LVL 18

Expert Comment

by:web_tracker
Comment Utility
This should be a lesson to all never leave personal information on a company laptop, or computer, it can cause a lot of embarrassment, or can cause other grief, due to lost data, or data getting in the wrong hands.

Thanks for the feedback.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now