永远不用cd启动compueter [英] never boot compueter with cd
问题描述
大家好，
这是我的问题：
我在高中工作级别安全的地方，每个人都可以物理访问我的电脑，如果他们在我的操作系统中这样做就可以！但是，如果有人使用CD现场操作系统对我来说是悲剧的！
你必须知道BIOS密码对我没有帮助...
如何编程我的电脑无法使用CD live OS启动???我不希望任何人用CD启动我的电脑......我怎么能这样做？
我可以登录系统吗？所以我可以看到有人用启动光盘登录???
任何建议都会有所帮助。
谢谢
最好的问候
Karim
想法1：将CD-ROM驱动器放在另一台计算机上并限制对该计算机的物理访问。防止从网络启动可能更容易。
想法2：将CD-ROM驱动器放入锁定的机箱中。只有拥有代码或密钥的人才能使用该驱动器。
创意3：构建一些电子设备，以便在计算机停止时断开驱动器的连接，即需要一个程序在计算机上运行才能重新激活它（可能是一些由串口控制的电子设备）。
创意4：将任何CD-ROM复制为图像文件（说ISO文件）并将它们放在可访问的硬盘上。安装软件以访问这些图像。复制完所有需要的图像后，即可从计算机中删除该驱动器。或者，您可以复制CD-ROM内容并使用文件浏览器访问它。
您的如果有人使用过CD live OS和我在高级别安全地点工作似乎有一个引人注目的争议。
可能你不是在一个高级安全场所工作，但是你在一个没有安全保障的地方工作管理层只假装他们使用了一些安全性，这比没有任何安全性更糟糕。
当然，除了安装的操作系统之外，没有启动公用计算机在硬盘上是个好主意。这是通过BIOS中的启动选项（如果这是基于BIOS的系统，当然）和其他任何地方完成的。您可以在BIOS设置中设置密码。
如果您应用一些基本逻辑，您将理解没有其他任何东西可以阻止启动计算机。如果你的磁盘被绕过了，那么这个磁盘上安装的任何软件可能会有什么帮助？！
即使BIOS保护也很容易被覆盖，因为主板上有一个特殊的跳线重置闪存存储数据并设置出厂默认值。能怎样？难道你不认为丢失密码这样的东西应该导致丢失整个主板吗？人们设计主板通常不是那么愚蠢。
您可以采取完全不同的路线。您可以加密所有硬盘。在这种情况下，如果从其他媒体加载，则没有人可以访问您的数据。此人只能损坏或重新初始化/重新格式化您的驱动器，但无法访问您的驱动器，让您不知道这一点。
-SA
Hi to all,
here is my problem:
I'm working in high level security place, every one have physical access to my computer and it is OK if they do that in my OS! however if anyone used CD live OS that would be tragedy for me!
you must know that BIOS password doesn't help me...
how can i program my computer to not booting with CD live OS??? i don't want anyone could boot my PC with CD... how can i do this?
can i log the system? so i can see when someone log in with boot CD???
any suggestion would be helpful.
thanks
best regards
Karim
Idea 1: Put the CD-ROM drive on a second computer and restrict physical access to that computer. It might be easier to prevent booting from network.
Idea 2: Put the CD-ROM drive in a locked enclosure. Only those who have the code or key would be able to use that drive.
Idea 3: Build some electronics to disconnect the drive when the computer is stopped and that is requires a program to run on the computer to reactivate it (maybe some electronics controlled by a serial port).
Idea 4: Copy any CD-ROM as image file (say ISO file) and put them on an hard drive accessible. Install a software to have access to those images. Once all needed images have been copied, you can remove the drive from the computer. Alternatively, you might copy the CD-ROM content instead and access it using file explorer.
Your "if anyone used CD live OS" and "I'm working in high level security place" seem to be in a striking controversy.
Probably, you are not working in a "high level security place", but you are working in a no-security place where management only pretends they use some security, which is much worse than no security at all.
Of course, not booting a publicly available computer from nothing but it's intended OS installed on the hard drive is a good idea. This is done by "boot options" in BIOS (if this is BIOS-based system, of course) and nowhere else. You can set a password on BIOS setup.
If you apply some elementary logic, you will understand that nothing else can prevent booting up a computer. If your disk is bypassed, how any software installed in this disk could possibly help?!
Even the BIOS protection can be easily overridden, as motherboards have a special jumper used to reset the flash-memory stored data and set factory defaults. How else? Don't you think that such thing as lost password should lead to throwing out of the whole motherboard? People designing motherboard are usually not that stupid.
You can take a completely different route. You can encrypt all your hard drives. In this case, no one can possibly access your data if loaded from a different media. This person could only damage or re-initialize/reformat your drives, but cannot access your drives leaving you unaware of that.
—SA
这篇关于永远不用cd启动compueter的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
