boot from floopy or cd to start windows?

  • Thread starter Thread starter jim berryman
  • Start date Start date
J

jim berryman

Is there a way to require a floppy disk or boot cd to start up windows 2000?
The situation is that I have a computer in my company that we need to
control entry to and would like to find a way to issue a floppy or boot cd
to users to log onto windows with and then they would return it to a control
officer. We are on a domain and the computer is used to access a web
program. My boss says he has seen this before but I have never seen this.

Thank You,
Jim
 
jim berryman said:
Is there a way to require a floppy disk or boot cd to start up windows 2000?
The situation is that I have a computer in my company that we need to
control entry to and would like to find a way to issue a floppy or boot cd
to users to log onto windows with and then they would return it to a control
officer. We are on a domain and the computer is used to access a web
program. My boss says he has seen this before but I have never seen this.

Thank You,
Jim
Click to expand...

This is fairly easy:

- Start Win2000
- Format a floppy disk
- Copy the following hidden files to the floppy:
c:\ntldr
c:\ntdetect.com
c:\boot.ini
- Leave the floppy disk in the disk drive
- Reboot your machine. Win2000 should start as usual.
- Move the following hidden files into c:\BootFiles
(you must first create this folder):
c:\ntldr
c:\ntdetect.com
c:\boot.ini
- Remove the floppy disk
- Restart the machine. It will no longer boot, unless you
insert the floppy disk.

Keep in mind that it is fairly easy to get around this
restriction, if somebody knows what he's doing.

To restore the machine to its previous condition, simply
move the files from c:\BootFiles back to C:\.
 
Jim wrote in
Thanks Pegasus
Click to expand...
[ ]

Of course the user with the diskette might just do a Diskcopy and make
their own copy...

You might look into 3rd-party utilities to password-protect the disk
and/or require a physical "key" to boot it. Some exist that could be
stored on a USB "plug this in to boot up" device. Not my area though
for any pointers.
 
Mark V said:
Jim wrote in
Thanks Pegasus
Click to expand...
[ ]

Of course the user with the diskette might just do a Diskcopy and make
their own copy...

You might look into 3rd-party utilities to password-protect the disk
and/or require a physical "key" to boot it. Some exist that could be
stored on a USB "plug this in to boot up" device. Not my area though
for any pointers.
Click to expand...

Good point.

A somewhat more secure way to lock a machine involves
setting a BIOS password. If you do this then you must be
careful to record the password in a safe place. I have dealt
with numerous machines that had a BIOS password, and
nobody remembered what it was.
 
A somewhat more secure way to lock a machine involves
setting a BIOS password. If you do this then you must be
careful to record the password in a safe place. I have dealt
with numerous machines that had a BIOS password, and
nobody remembered what it was.
Click to expand...

The motherboard should have a jumper to clear the password.

To add another suggestion. How about a key card system? A boot diskette
can be copied. A BIOS password can be leaked. A key card is more
difficult to copy.
 
CyberDroog said:
The motherboard should have a jumper to clear the password.
Click to expand...

Many motherboards do. Some don't. With some motherboards
you can remove the battery. With some you cannot.
 
Pegasus (MVP) wrote in
Many motherboards do. Some don't. With some motherboards
you can remove the battery. With some you cannot.
Click to expand...

The OP stated a "company system" that is presumably secure enough
physically for the limited general access. I'll guess any passord
scheme is out due to unauthorized reuse of the given current passord.
Key Card, USB "card" etc. (a physical but non-copyable token) is
likely the best way to go.

If in a Domain, perhaps a scripted Account change to "Permitted to
logon from xxx" might be another idea for the admins to consider. If
they use Domain account logons of course. Just spit-balling...
 
Back
Top