Wrong domain is not checked ?

[Dave J. Andruczyk]

> Even with policies, people are able to execute command.com without logging
> in.  from there you can run explorer.exe and you have all you need.
> getting around even the best 9x security can be trivial.

Just rename "taskman.exe" to something else, and then you can't pop it up
at the logon screen with Ctrl-Alt-Esc.  There are documented ways to
prevent "safe mode" bootups, and use the bios to prevent booting from
floppy or CDrom.  

Dave J. Andruczyk
Instructional Support Associate
Department of Technology     
Buffalo State College