Security Basics mailing list archives
RE: protect MS Windows 95/98/Me
From: "dave hartnell" <dihartnell () xtra co nz>
Date: Mon, 29 Sep 2003 21:47:40 +1200
Hi Robert, Some years ago I implemented policies on a NT network that had Win95 clients. This worked very well at locking down the client machine. One trap to beware of though was the roaming laptop. It has problems moving from one domain to another if the policy isn't configured correctly. Another possible solution is a program called Watchdog? I think this has some ability to prevent anyone fooling around with the OS unless they sign into watchdog first. I agree with a lot of the other comments made. 95 can be messed up by booting to dos and then stuffing with it from there so these kinds of measures are only really going to keep the honest people out. An easy imaging system is definitely going to be needed. Fortunately Ghost works quite well in this area. Dave Hartnell Enze IT Limited -----Original Message----- From: Steve McLaughlin [mailto:steve () Lan com au] Sent: Saturday, 27 September 2003 5:35 a.m. To: security-basics () securityfocus com Subject: RE: protect MS Windows 95/98/Me Well I must admit, I haven't seen a 486 within the last 2 years. Mandatory profiles would be a real quick and simple solution with NT5 When reloading windows9x however, I haven't seen this type of software before, but what I would do is create a hidden partition at the end of the drive with a ghost image of the entire reload with all its programs etc. To restore the data: - boot from a boot disk with a script that unhides the hidden partition, and then ghosts the image back to the system partition. And then hides the partition again. I have found this works quite effectively in the event of virus infection, and software corruption. Steve Mc -----Original Message----- From: Steven A. Fletcher [mailto:sfletcher () bcsc com] Sent: Friday, 26 September 2003 5:18 AM To: security-basics () securityfocus com Subject: RE: protect MS Windows 95/98/Me I have to disagree. There IS another way, and that way is to use a piece of software, such as FoolProof, which other have mentioned. While I agree that Win9x is a dead-end, there are many situations where budgets do not allow for people to upgrade to new OS's, especially when doing so would also require new hardware. And, installing software such as FoolProof can help make Win9x much more secure, as long as it is configured properly. It is true that Win9x is never going to be as secure as NT 4/Win2k/WinXP, but that does not mean that steps cannot be taken to at least minimize the potential problems. One other thing I would suggest is to have a way to image the PC's. That way, if someone screws one up, just load the image again. This will save LOTS of troubleshooting time. Just my $.02 worth...... Steve -----Original Message----- From: Steve McLaughlin [mailto:steve () Lan com au] Sent: Thursday, September 25, 2003 4:23 AM To: security-basics () securityfocus com Subject: RE: protect MS Windows 95/98/Me Yes, that's a very polite way of saying it. There is no security features in win9x OS. They are all totally unsecure operating systems. The security features within are totally flawed in all ways, there is no way of securing these operating systems. The solution is to upgrade to windows 2k or XP, using NTFS. There is no other way. Don't embarrass yourself wasting the organisations capital on totally obsolete and unstable operating systems. Consider the 9x OS Obsolete, upgrade to NT5 or 5.1. Don't bother even looking further into securing Win9x. It is a total waste of time. steve mclaughlin | enlite technologyR T 1300 135 251 | F +61 (2) 9402 8586 E steve () Lan com au | W www.Lan.com.auT (MCP, A+, Network+, Server+) -----Original Message----- From: French, Mark [mailto:Mark.French () wellington co uk] Sent: Thursday, 25 September 2003 2:07 AM To: 'security-basics () securityfocus com' Subject: RE: protect MS Windows 95/98/Me I don't know of any software, but in this situation, my hardware of choice would be SCISSORS. Cut the network cable, keyboard cable, and mouse cable. This is probably the only way that this level of security can be achieved in these operating systems. Mark (Sorry, I couldn't resist) -----Original Message----- From: Robert Reidenbach [mailto:pominciss () greendot com ph] Sent: 24 September 2003 06:25 To: security-basics () securityfocus com Subject: protect MS Windows 95/98/Me Hi everyone! I'm looking for a software that you can install on MS Windows 95/98/Me Machines that won't allow an ordinary user to install any programs or allow any virus to infect any files. Would anybody know what they call these programs and where to get them? Any kind of help will be appreciated. -Robert- ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- _____________________________________________________________________ This e-mail has been scanned for viruses by MCI's Internet Managed Scanning Services - powered by MessageLabs. For further information visit http://www.mci.com ________________________________________________________ The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. The registered office of Wellington Underwriting plc is 88 Leadenhall Street, London, UK EC3A 3BA. ________________________________________________________ ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- ------------------------------------------------------------------------ --- ------------------------------------------------------------------------ ---- --------------------------------------------------------------------------- ---------------------------------------------------------------------------- --------------------------------------------------------------------------- ---------------------------------------------------------------------------- --------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- RE: protect MS Windows 95/98/Me, (continued)
- RE: protect MS Windows 95/98/Me Spencer D'oro (Sep 24)
- Re: protect MS Windows 95/98/Me Ansgar -59cobalt- Wiechers (Sep 25)
- RE: protect MS Windows 95/98/Me French, Mark (Sep 24)
- RE: protect MS Windows 95/98/Me Steven A. Fletcher (Sep 25)
- Re: protect MS Windows 95/98/Me Ansgar -59cobalt- Wiechers (Sep 25)
- RE: protect MS Windows 95/98/Me Spencer D'oro (Sep 26)
- RE: protect MS Windows 95/98/Me Alexander Suhovey (Sep 29)
- Re: protect MS Windows 95/98/Me Tomas Wolf (Sep 30)
- Re: protect MS Windows 95/98/Me Ansgar -59cobalt- Wiechers (Sep 25)
- RE: protect MS Windows 95/98/Me Steve McLaughlin (Sep 26)
- RE: protect MS Windows 95/98/Me dave hartnell (Sep 29)