WinXP AutoLogon Question

[firewolf]

I read in these forums that you should always have a password for your account on WinXP to make it more difficult for hackers/crackers. But when I start up my computer, it's always a nuisance to click the account and enter in my password.

However, if it were possible to have it so WinXP "auto logs on" itself with the username and password, would it be the same thing? Does the account still have the same amount of security? Would it be even more secure if each time the computer logged on there would be a different password? (keep in mind i would be able to find out the password)

Any input/information would be a great help...

Thanks,
FireWolf

[DVNT1]

My best guess, a password is better than no password.

Autologon or not, you should have the same basic security over the network/Internet wither way. But the local security obviously won't be there (someone physically at your computer) with Autologon.

[firewolf]

Alright, thanks! That's all I needed to know

[John Prophet]

An Article
http://www.auburn.edu/oit/security/logon.html

Another article, by Msoft. Since its by Microsoft you sort of have to laugh about it being a "security" article. But it has some good basic info about stuff, including logging on... the specific part you are asking about is down where it says "securing login"

http://www.microsoft.com/technet/tre...n/5min-103.asp

JP

[DVNT1]

Originally posted by John Prophet
An Article
http://www.auburn.edu/oit/security/logon.html

Another article, by Msoft. Since its by Microsoft you sort of have to laugh about it being a "security" article. But it has some good basic info about stuff, including logging on... the specific part you are asking about is down where it says "securing login"

http://www.microsoft.com/technet/tre...n/5min-103.asp

First link, no theory, just how to change settings.

2nd link, better info... "Ctrl-Alt-Delete is a special key sequence that breaks out of any application that might be running. This effectively prevents Trojan Horses from pretending to be the logon screen and secretly recording your password information." ...which is accurate IMO. But for this to be a factor, a trojan horse progam already has to be on your machine. So, if you use autologon and already have a compromised computer, then you have reduced security compared to a ctrl-alt-del logon on a compromised computer.

Might I add, if you already are infected with a trojan, you also have other problems with passwords being compromised via other methods.

[firewolf]

Thank you both for the replies

I found out some really cool stuff from them links. Learned some other ways to do what I'm after, and got some more ideas along the way

Just one thing for DVNT1, you said that Ctrl+Alt+Delete breaks out of ANY application that might be running.... it cannot detect some programs running. I made a program that runs and I don't know if it's running or not, it acts only as an "informer" i guess. I have WinXP Home if that makes a difference to any other OS's, maybe it's different with other OS's, but with WinXP Home and im pretty sure Pro also, it cannot detect certain programs. Unless I'm doing it wrong or I have some option set wrong.

Question directed to John Prophet:
You said "Since its by Microsoft you sort of have to laugh about it being a "security" article". Why did you say that? Microsoft has a lot of security breaches? Or ways to easily bypass Microsoft Security?

Another question for all:
I noticed no one commented on the multiple passwords for the logon. Is it a good idea or it has the same level of security? I would be able to find out the password easily but not so easily for others.

[DVNT1]

firewolf: I was just quoting from the link. I think that reference is directly relating to a malicious logon program posing as the actual MS logon. speculation: It would be hiding the other apps already running & ctrl-alt-del should expose that via Task Manager popping up.

[firewolf]

I'm sorry i'm still lost. what do u mean it would still be hiding other apps already running? I know Task Manager tries to show all applications running but it doesn't. I could devise several programs and run them all at the same time and task manager would be clueless. It only shows that memory is being used but doesn't know the source. Is there another way to find out what is running?

[meese]

Quote

"I could devise several programs and run them all at the same time and task manager would be clueless."

What programs could you devise? Can you give an example?

[firewolf]

For one, alert programs, programs which "clean" the registry, any program at all. A game, an application, a clock, a program that runs other applicatiosn... um... was there a specific type of application you wanted to test to see if it could be hidden?