Windows 7: Need lock-down guide - sending laptop to repair

daemonmonkey · 07 Feb 2010

Hi Folks

I need a guide on how to lock-down the guest account so that the repair shop doesn't have access to most of it's contents.

System setup:

Dual Boot Vista Home Premium / Win7 Pro (actually tripple-boot with WINE)
Partitioning according attached image.

Steps done so far:

Activated Guest account.
Drive D: applied security setting for Guest as Deny All

I want also to restrict as much as possible the content listing of the two system partitions, that is if it's possible to restrict listing what's installed on it, restrict access to certain programs,and so on-

Questions:

Can I put Deny All to the VISTA partition from Windows 7 and vice versa?
Can I restrict listing but still maintain the ability to run programs?
If I move the program shortcuts from ProgramData to my normal User account, will they still be accessible to the Guest account?

Hope for a quick answer

/DM

EDIT: Can I use a disk imaging software like Norton Ghost or Acronis TrueImage to create working images for Vista from Win7 and vice versa in case of an "expert" reformatting the drives?

Mikaka · 07 Feb 2010

Encrypt partition with sensitive data, NTFS permissions won't stop them.

Dwarf · 07 Feb 2010

What problems are you having necessitating its repair?

Barman58 · 07 Feb 2010

If you do not trust the repair shop the best advice I can give is to find another repair shop.

If the laptop is going into the shop for a hardware repair that does not require the hard disk you could always simply remove the drive completely.

If this is a software issue or hardware that will require access to the system drives then you cannot really expect the technicians to work without full access to the drive, the only thing you can do is totally remove any sensitive data.

jimbo45 · 07 Feb 2010

Hi there
can you boot this machine from a DVD,

If you can then use a stand alone Backup - you can download a trial of acronis or other software - to backup to external drive and then WIPE the laptops HDD. You can use GPARTED or similar to force a wipe of the HDD.

Now you can restore the "initial configuration" if the laptop came with pre-installed stuff - if not just send the laptop for repair with an empty disc.

Technicians will have bootable OS'es etc for repairing the computer -- when you get it back make sure they haven't charged you for "re-installing an OS".

If the system isn't bootable then remove the HDD and insert another one if you can --laptop HDD's are generally easy to remove and swap.

Enc pic of typical SATA laptop HDD.

Cheers
jimbo

daemonmonkey · 07 Feb 2010

Quote: Originally Posted by Dwarf

What problems are you having necessitating its repair?

Just a warranty keyboard repair (it's a laptop).

Quote: Originally Posted by Barman58

If you do not trust the repair shop the best advice I can give is to find another repair shop.

If the laptop is going into the shop for a hardware repair that does not require the hard disk you could always simply remove the drive completely.

If this is a software issue or hardware that will require access to the system drives then you cannot really expect the technicians to work without full access to the drive, the only thing you can do is totally remove any sensitive data.

It's a warranty repair, thus I'm stuck with this repair shop. HP tech said that I could not remove the drives, and that I should back up the data, bedause he could not guarantee that the shop doesn't format the drives.

My main reason for this is really the big trouble to reinstall all software according to my needs. At the same time I don't want them fiddling around in my personal data, not that it is sensitive, but I do have some personal stuff. Also I don't want them to get their hands on my media files, MP3's etc.

I don't believe that a shop has a standard procedure of reformatting drives, but I've known of repair guys that have the FFR procedure as standard, even if it is swapping a CD-drive or replacing a keyboard....

Attached: pics of my two HDD's...

GEWB · 07 Feb 2010

Quote: Originally Posted by daemonmonkey

Just a warranty keyboard repair (it's a laptop).

It's a warranty repair, thus I'm stuck with this repair shop. HP tech said that I could not remove the drives, and that I should back up the data, bedause he could not guarantee that the shop doesn't format the drives.

OK, this seals the deal...it's an HP repair. THEREFORE, I strongly recommend you create a full image of all partitions. DON'T FOREGET to include the MBR (some backup programs don't do the MBR unless specified as a switch).

Then delete all the stuff you want (don't want on the drive) and if necessary run a "zero wipe" program to overwrite all free space.

I bring all of this up because there is a HIGH PROBABILITY the HP repair WILL do you a "favor" and return the lappy to it's original As-shipped conditions. That means your partitions will be wiped/loaded to as-shipped as well as all the HP bloatware installed, etc.

When it returns (hopefully repaired) you can restore everything the way it was.

Speaking From Experience,
GEWB

daemonmonkey · 08 Feb 2010

Quote: Originally Posted by GEWB

OK, this seals the deal...it's an HP repair. THEREFORE, I strongly recommend you create a full image of all partitions. DON'T FOREGET to include the MBR (some backup programs don't do the MBR unless specified as a switch).

Then delete all the stuff you want (don't want on the drive) and if necessary run a "zero wipe" program to overwrite all free space.

I bring all of this up because there is a HIGH PROBABILITY the HP repair WILL do you a "favor" and return the lappy to it's original As-shipped conditions. That means your partitions will be wiped/loaded to as-shipped as well as all the HP bloatware installed, etc.

When it returns (hopefully repaired) you can restore everything the way it was.

Speaking From Experience,
GEWB

Thanks GEWB

Seems that your advice (and of the others here) is the one I should follow. I don't care about wiping etc. as the main reason is the huge work in restoring the computer as I want it.

I hope the consumer laws here in Scandinavia are strong enough to make them think twice before doing such a thing. It IS illegal to breach security measures, to destroy data unless approved by the EU, etc. Doesn't help when facts are there, so hopefully by sending in a note that they aren't allowed to do things like that without contacting me can scare them enough...

A huge THANK YOU to all who have responded!