Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the '10.4: Shut down, sleep, or restart from login window' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.4: Shut down, sleep, or restart from login window
Authored by: PatentBoy on Jun 20, '05 01:25:26PM

To me, the security risk is there.

If, for example, someone has set up the computer to auto-log a specific User and then selects the Login Window... (set to not show the restart button) in the fast user switching menu prior to going to lunch, then someone could restart the computer with >restart while the User is away and the computer would boot right into the User account, gaining access to the computer to the extent the User has access.

PatentBoy



[ Reply to This | # ]
10.4: Shut down, sleep, or restart from login window
Authored by: pwagenet on Jun 20, '05 01:39:32PM

The security risk there is in the fact that you set auto user login. Anyone who wants a secure system should not enable this.

---
-Peter



[ Reply to This | # ]
Wrong; no additional risk
Authored by: daveschroeder on Jun 20, '05 01:43:08PM

In order for someone to somehow gain access to the login window (e.g., via FUS) and the type ">restart", they need physical access to the machine. If they have physical access to the machine, they already can reboot it.

Even though I'm sure people will try to claim so, this does NOT represent a "security risk" above and beyond any access you already have by virtue of having physical access.



[ Reply to This | # ]
Wrong; no additional risk
Authored by: PatentBoy on Jun 20, '05 03:06:24PM

There is no risk if the computer always boots into the login window.

But, in my opinion, if the computer boots into a User account and that User (who is logged in) selects the login window, while going to lunch for example, another could reboot his machine and the machine would then boot into the User account automatically giving the other user access to the computer.

Am I missing something? perhaps I do not understand the complete situation.

PatentBoy



[ Reply to This | # ]
Wrong; no additional risk
Authored by: PatentBoy on Jun 20, '05 03:11:24PM

I finally figured it out...

If someone is logged onto the machine, it will not be able to be restarted unless an admin password is provided to safeguard the current users un-saved work, etc.

sorry for the confusion...



[ Reply to This | # ]
Wrong; no additional risk
Authored by: Shawn Parr on Jun 20, '05 03:52:09PM

No problem. Hold the power button down for a few seconds. The machine turns off.

Turn machine on and have access to any personal files for an auto login user...



[ Reply to This | # ]