Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Windows user privileges
From: Paul Schmehl <pauls () utdallas edu>
Date: Sat, 20 Nov 2004 19:28:13 -0600

--On Saturday, November 20, 2004 8:19 AM -0500 Mike Hoye <mhoye () neon polkaroo net> wrote:

On every XP install that I've seen from every major OEM (Dell, Compaq,
Gateway, etc) fast user switching is on by default and every user is
an administrator. Not "on most"; on every single one.

Furthermore, these machines don't have actual XP OS install CDs, they
usually come with "restore" CDs that just return the PC to this same
initial state if they're used, which they almost never are.

I have never seen a home user, that is to say change that setting or
create a user who is actually just a "User". Not once, ever.

And this is a flaw of the *OS*?  Or of the *OEM*?

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]