Hi: here's a list of  what you can do:

1. laptops usually have a security option in the BIOS config. if you don't 
get passed that authentication, computer won't even boot up.         That's 
a start point at least..

what OS do they use ?  if it's win2k you can:

1. create a user on they're system with a strong password (min 6 caract., 
combined numbers, symbols, spaces, etc). 2. activate EFS (encryption file 
system) for the files and folders that contain critical info. 3. apply all 
service packs and security patches 4. disable all unnecesary users, groups, 
shares, and all microsoft defaults that could be used to crack into the 
system as a valid user. 5. Implement a Digital Security policy using win2k. 
Use the max encryption available.. 6. backup the encryption key at your 
office and keep it in a secure place.

Since win2k encrypts based on kerberos v5, without that key, even if they 
take the files out of the computer, they will be absolutely useless. The 
only way for them to see the content of those files is if they logged in as 
the specific user that owns the file. That's why a good password policy is 
a must. Since it's encryption within a private enterprise, you can use 
encryption higher than 128-bit..  This is just without having to look for 
3rd party solutions in order to reduce costs and utilize the available 
resources.. Keep in mind that no matter how good security can be, there's 
always going to be somebody wise enough to crack it.. all you can do is 
minimize and isolate the impact of a security breach..


         Amram Pe�a
         Microsoft Certified Professional
         Email:  [EMAIL PROTECTED]

Reply via email to