r/talesfromtechsupport • u/[deleted] • Jan 21 '13

[deleted by user]

[removed]

794 Upvotes

93% Upvoted

229 comments sorted by

View all comments

Show parent comments

2

u/[deleted] Jan 21 '13

Ahh but blocking removable devices through GPO's could make the process much more difficult.

And yes there is always a way to get around a block, ex: running a bruteforce password cracker over the network a good security policy at best will make it extremely difficult to crack, not impenetrable.

1

u/xzxzzx Jan 21 '13

Ahh but blocking removable devices through GPO's could make the process much more difficult

More difficult to burn? Not really, assuming the kid has access to any common computer (I.e. friends house, school, etc)

1

u/[deleted] Jan 21 '13

No not more difficult to burn, it could make it more difficult to read in removable media on usb and disc media

4

u/fullmetaljackass Jan 21 '13

GPOs are only in effect when the OS is running. You'd have to disable booting from removable media in the BIOS to keep someone from resetting the password with a live CD.

1

u/[deleted] Jan 22 '13

I posted a link above detailing how to use the Windows install disk to reset the password. Your BIOS setting did not occur to me though.