OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Win98 Screen Saver password and Remote Login.
From: Choz Sun (choz_sunHOTMAIL.COM)
Date: Mon Sep 18 2000 - 16:25:34 CDT

David,

In this case, wouldn't you lay down the ruddie-poo smackdown and prevent end users from locking screen savers?

Just use System Policy editor to lock them out of Display Properties and c:\Windows\ and c:\Windows\System

Joe Louthan
j_louthanhotmail.com

  ----- Original Message -----
  From: David Sanner
  To: FOCUS-MSSECURITYFOCUS.COM
  Sent: Saturday, September 16, 2000 12:29 AM
  Subject: Win98 Screen Saver password and Remote Login.

  Are there any tools or methods which could be used to get into a Windows 98 system when the screen saver password kicks in "AND" a remote administrator, whoever, is connecting to that station using a remote Timbuktu or PCAnywhere session?

  For example, I was trying to get to my remote user's workstation after all users had gone home. I originally set up
  the Timbuktu client, so I knew the remote Timbuktu login name and password, but the user had a screen saver password that locked me out. Obviously, at this point, I could not just reboot the remote station. If I were able to remotely reboot, I would have just logged into this station using my administrator login/ password.

  My sessions are established over the Internet through a T1 connection, thus do not rely on dial up.

  David A. Sanner
  Principal Network Architect
  Smartnet Systems, Inc.