Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
Hello Everyone,
I have a couple of basic questions. I have 2 desktops setup on a wireless
router for internet access and setup for file sharing. All works quite
well. My questions are: If PC 1(mine/wired to router) is completely
shutdown and router disconnected from the internet via status page in
router, can someone else possibly get into my PC(not knowing passwords) and
change the date and or time to break into my files? I found in event viewer
that the time and date was changed 3 hours after I shutdown and disconnected
from the Internet in the router in the security section. Can PC2 on the
wireless workgroup I have get into the files after PC1is shutdown and
disconnected from internet again via status page. I'm a bit at a loss on
this,seeing that my time and date were changed! Any responses would be
welcome.
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
If you're serious then here's your answer: No, nobdody can get to your PCs
when they're shutdown. File sharing relies on some network protocols that
obviously aren't running while the system is off so nobody can get to your
files. The hardware clock keeps running even when the PC is off (in order
to keep correct time) using the BIOS/CMOS backup battery (it's on the
motherboard). If the battery is dying then the date could change when the
system is off but the Event Log isn't running so there is no way for the
Event Viewer to know what happened. Your system may have some extended CMOS
utilities installed that allow the BIOS to hold hardware event information
and log it in the Windows Event Log when the system is up - I haven't seen a
system like that so far but I guess it's possible. I'd replace the
BIOS/CMOS battery and see if it happens again.
"Parker" <nospam@nospam.com> wrote in message
news:ecdhlvXKFHA.3296@TK2MSFTNGP15.phx.gbl...
> Hello Everyone,
> I have a couple of basic questions. I have 2 desktops setup on a wireless
> router for internet access and setup for file sharing. All works quite
> well. My questions are: If PC 1(mine/wired to router) is completely
> shutdown and router disconnected from the internet via status page in
> router, can someone else possibly get into my PC(not knowing passwords)
> and change the date and or time to break into my files? I found in event
> viewer that the time and date was changed 3 hours after I shutdown and
> disconnected from the Internet in the router in the security section. Can
> PC2 on the wireless workgroup I have get into the files after PC1is
> shutdown and disconnected from internet again via status page. I'm a bit
> at a loss on this,seeing that my time and date were changed! Any
> responses would be welcome.
>
> Thanks in Advance
>
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
On Tue, 15 Mar 2005 13:25:37 -0500, Fritz wrote:
>
> If you're serious then here's your answer: No, nobdody can get to your PCs
> when they're shutdown. File sharing relies on some network protocols that
> obviously aren't running while the system is off so nobody can get to your
> files.
Many PC's can be setup to Wake at a specific time in the BIOS, many UPS
systems will wake a PC, there is also Wake On Lan that can wake a PC
across the network.
--
spam999free@rrohio.com
remove 999 in order to email me
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
Yes, we have changed the password and I will get the log to you.
Thanks Again for all of Your Support!
"Frances [MSFT]" <v-franhe@microsoft.com> wrote in message
news:RGqkOKvKFHA.1136@TK2MSFTNGXA02.phx.gbl...
> Hello Parker,
>
> According to your reply, it is really strange.
>
> To let me have a clear understanding, please send the event logs to me for
> further research.
>
> Follow the steps below to get Event Log and send them to
> v-franhe@microsoft.com. I will try my best to see what I can do regarding
> this issue.
>
> 1. Click Start (menu) -> Control Panel (menu)
>
> 2. Double click Administrative Tools (icon) in Control Panel (folder) to
> navigate to Administrative Tools (folder)
>
> 3. Double click Event Viewer (icon) in Administrative Tools (folder)
>
> 4. Highlight Application (sub tree of Event Viewer (Local)) and right
> click
> it
>
> 5. Choose Save Log File As¡ (menu) from the context menu
>
> 6. Save it as Application.evt and send it to me as attachment.
>
> 7. Do the same with Security and System and save the logs as Security.evt
> and System.evt.
>
> In addition, have you changed the password to make sure it is not your
> son's trick?
>
> I am looking forward to your reply!
>
> Best regards,
>
> Frances He
>
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security >
> =====================================================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
Frances, I have solved the problem. I very recently downloaded Microsoft
AntiSpyware Beta1. When I went to download the updates my clock and date
changed. I'm not sure how to explain that but it did. After bootup the
next day the time syncronized itself by internet time and I never noticed
the entries in the event viewer. Thats is where I found the culprit, in the
applications viewer that the download had put an "!" in the viewer that told
me that the clock had changed. Again I thank all of everyones efforts in
these News Forums for there knowledge and time to help us correct our PC
problems and pointing us in the right direction.
Thank You All
"Frances [MSFT]" <v-franhe@microsoft.com> wrote in message
news:1Yb9AM6KFHA.380@TK2MSFTNGXA02.phx.gbl...
> Hello Parker,
>
> You are welcome. Let us see what we can do for you based on your logs. >
> Best regards,
>
> Frances He
>
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security >
> =====================================================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
You are about to answer a thread that has been inactive for more than 6 months. If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.