Re-setting Mac Passwords

[fawkers]

I've just had a student come to me because she couldn't remember her password for her mac (i dont know....). I told her i would take a look at it, I put the install disc in and poked around and found that you could re-set her password with a simple util.

 

I'm I the only one that see's a HUGE issue with this? Is there a way that you could force your account not to be re-set by this method?

 

rant over....

 

thanks

 

.adam

[Quackers]

You can do it that with Windows with a simple boot CD.

[fawkers]

true, but this is with the install disk not a 3rd party util.

[bladedanny]

You can set a firmware password so you need a password to boot from any cd. Just don't forget what it is.

[DMcCoy]

You don't even need the disc, you can go into single user mode at boot and do it from there.

[AdamMason]

boot from the normal cd/dvd pressing C until apple sign pops up

 

on the apple menu on the top left there is reset password option

 

then restart when done

[sammya]

fawkers

 

as bladedanny says, you can turn on the firmware password on the mac, knowledgebase article here

 

Setting up firmware password protection in Mac OS X

 

this stops anyone from booting from CD without the firmware password. So should fix your security hole.

 

You can however, reset the firmware password by changing the RAM configuration, adding or removing a DIMM, so it's not ideal!

 

Sammy

[bladedanny]

You can however, reset the firmware password by changing the RAM configuration, adding or removing a DIMM, so it's not ideal!

 

Sammy

 

Would I be correct in thinking that this is not a proven method and will not work every time. But has an of chance off doing so?

 

Dan (ACTC)

Edited January 26, 2010 by bladedanny
Spelling

[sammya]

Would I be correct in thinking that this is not a proven method and will not work every time. But has an of chance off doing so?

 

Dan (ACTC)

 

Haven't tried it in a while but AFAIK this is the method to bypass the firmware password.

 

Sammy

[TheITCrowd]

When I found out that I can to do that too ... I was a alarmed too but it has turned out to be a huge lifesaver when the admin password is lost or changed without noticed.