I’m a (noob) administrator of a little network. For business purpose I have some Windows 7 PCs and a 2008 Server. While doing the setup, something has come to my mind: is it possible for a user without high privileges to install some kind of software using a live usb? Ok, it’s possible to reset admin password, manage partitions, etc. but can someone do that without change admin settings? just putting software in admin’s (or else) directory and editing the windows register?
Thanks!
Advertisement
Answer
I would say: Yes. If someone manages to boot the machine from a live usb-stick, cd, dvd or whatever, he can:
- Mount the disk with the windows-installation.
- Read and Write to that disk.
- Install software on that disk: Installing software is not much more than copying files from one place to another.
- Possibly modify the registry: The registry must also be stored somewhere on the disc. If the user can access that file, he can modify it and therefore modify the registry (its another question if this are valid manipulations).