|
|
|
|
Division of IT: Security
Make IT Safe: Secure Administrator PasswordsPassword Vulnerability Exposed in Windows XP/2000How easy is it for someone to actually hack into your computer? If you are running Windows XP or 2000 and haven't taken the right precautions, such as choosing an administrative password, it can be relatively easy. A common method of intrusion includes scanning for computers that do not have administrator passwords and are connected to an always-on, high-speed network such as Mizzou TigerNet. Although Microsoft Windows XP and 2000 might look similar to Windows 95 or 98, it is quite different from a security standpoint.The Windows XP and 2000 DifferenceWindows XP and 2000 contain more complex services that can be exploited by someone wanting to do harm to your computer. Windows XP and 2000 offer "Server" and additional services through the default installation. Anybody who knows the administrator account password can contact these services through the network and obtain access to the machine. Windows XP and 2000 hacks can occur due to no password or a weak administrator password. Anyone who wants to cause harm can scan for administrative passwords, reach the computer, and as a result, log into your personal folders and files. Creating an administrator password will increase your privacy and protection against any user who uses your computer. It is highly recommended that you contact your technical-support provider (commercial or departmental IT professional) for assistance.Setting an Administrator Password in Windows XP
Setting an Administrator Password in Windows 2000
It's Your ResponsibilityIf your computer is broken into, an intruder may delete or destroy important data, look at personal files or even take control of your computer and use it to perform illegal activities, implicating you as the guilty party. It's your responsibility to choose and set a good password. University security personnel have detected frequent, systematic probes for weak passwords. If you have a weak password, the question is not so much if it will be exploited, but if it has already been exploited. If access to your computer has been compromised, first correct the problem. Then check for signs that intruders have already exploited your system, perhaps planted additional "back doors" that would persist even if you reset all passwords. If in doubt, e-mail isam@missouri.edu. ISAM can perform external and discreet internal security reviews of your computer. For more information, or if you need assistance in setting up your administrator password, call the Help Desk at (573)882-5000. |