For machines of mine that must REALLY be bullet-proof, I also remove the
hard drives,memory, motherboard, and power supply. I then put the empty
case behind a framed photograph of Janet Reno, which tends to keep even the
most desperate attackers at bay.

---------------------------------
Attonbitus Deus
ThorHammerofGod.Com

----- Original Message -----
From: "Nelson Marques" <nmarquesNETVISAO.PT>
To: <FOCUS-MSSECURITYFOCUS.COM>
Sent: Saturday, March 24, 2001 10:25 AM
Subject: Re: Locking CD DRIVE when computer is locked

> Remove the damn CDROM from the maxine, all our ibm 6000 and netfinity 4500
have
> no CDROM neither floopy drives. We dont need them for nothing. :)
> That is the best politic for not allowing untrustable users with phisical
acess
> to the machines to do something stupid like booting from CDROM or Floopy
> drives. I dont know what is the best solution for Win 2K Advanced Servers,
but
> that is 'bullet proof'... if there is no CDROM, no one will access it.
Besides
> Another thing is turning off the CDROM units on the BIOS, but everyone
with
> phisical access to the machines can 'flash' or reset the Bios and override
it.
>
> That is my politic, remove everything u dont need :)
>
> nelson
>
>
> On Thu, 22 Mar 2001, you wrote:
> > I know this has been said a million times over but it bears repeating.
If
> > your servers are not *physically* secured no amount of software is going
to
> > protect it. A simple lock on the door with keys given only to those
people
> > you would give full admin privs to is the only way to deal with this.
> >
> > Edd Flammer
> >
> >
> > >
> > > Philip Wagenaar wrote:
> > >
> > > > Hi,
> > > >
> > > > When I lock our server running windows 2000 advanced server service
pack I
> > > > can still open and close thr cd-rom drives. Is there any way to also
"lock"
> > > > the cd-rom drives so you can`t open them when the computer is
locked.
> > > >
> > > > I know you could still use a paperclip if it was possible, but
still.
> > > >
> > > > If there is no option for this is win2k, does anybody know of any
util that
> > > > does this?
> > > >
> > > > gr
> > > >
> > > > Philip Wagenaar
> --
> +-------------------------------------------------
> / Nelson Manuel de Oliveira Marques
> / NOC - Network Operations Center
> / Netual Multimedia e Telecomunicacoes Lda
> / nmarquesnetual.pt
> / http://www.netual.pt
> / Finger me for my PGP Fingerprint

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]