@Razor:
Quote
Razor:
But how could that be? Admin is to posess godlike rights in his realm. Maybe you should reinstall the OS? Sounds nasty, but.. as for me I have to reinstall my WinXP almost every month.

This admin here is not even a Demi-God - our admin rights are in hierarchical order - and as the security department does not like the idea of our public PC being a security gap - we only have restricted admin rights.

No possibility to reinstall Win 2000 on our level, as we are integrated in a network

Quote
Another suggestion - why not authoirise the physical acess to the PC? Or just log everyone who uses it..

The PC has a physical log in authorisation, which we do at start up. This is automatised, as some members tend to shut off the PC after use. As we have security cases now, we are constantly jumping up and slouching with the key to the PC (quite a bother) - I'm not worried about access to our catalogue, I'm worried about hacker abilities on that drive to find out stuff we can't, cause we are no hackers. We have to rely on the security guy who restricted further access with his software.

PC is back now, with a new hard drive, locked in a case, so switching the stolen (infected) drive would be a prob for the thief (if this was his plan).

PC is at the far end of the library, so members don't have to walk stairs if they want to look up the media in that floor (mainly novels and sadly the favourite location of our mischief kids). We do patrol there a lot during school year, as they like to violate our books, but as it was holidays during that time of theft, we will never be able to find out if the thief was out of that group. It could have been an adult as well (except our staff, as no one of us knows a lot about PC).

Quote
Do you back up you network? If it has some valuable information, than it's a good decision.

Yes, this is done - by the department in charge of all servers. We have no access to it (guess, we're not even Demi-Gods, more PC peasants <img src="/ubbthreads/images/graemlins/winkwink.gif" alt="" /> )
Kiya

I thank all <img src="/ubbthreads/images/graemlins/up.gif" alt="" /> , I will have to live with the nagging feeling of anxiety and patrol even more. I rest this case now. I only hope, this incident will not add fuel to the security department colporting our attempts to get our public catalogue on the internet, so members may do a lot from their home PC. Theft has weakened our position, shucks.

Quote
Shyon:
just an knowledge about your network - about the passwords - he/she can recover your passwords of emails if the IE was able to keep it and about admin passwords just if some admin was using the machine


Nope, no possibility to send mails - no possibility to enter the internet. Kids try this constantly, results in a total lock-up (security software). Even start up does not help then - I know of a gap, where I can fix that then (took me hrs to find this out <img src="/ubbthreads/images/graemlins/winkwink.gif" alt="" /> ) I informed about the sec. department this gap countless times - but do they listen? <img src="/ubbthreads/images/graemlins/puppyeyes.gif" alt="" /> No one of us was so stupid to enter with their own profile and leave traces. No possibility I know of to enter registry - restricted. Yes, I could, with my profile, but that's of no use.

Last edited by kiya; 05/09/04 09:45 AM.