I appreciate the reply, thanks.
The best free tool I use for password removal, and is typically safe, is a tool called the Trinity Rescue Kit, or TRK. Easy Google search and you will find the main site; it's been a opensource project for some time and it works well. Basically, you would download the ISO image, burn to cdrom...then boot the system in question with the cdrom and it will load this cd. I am not sure how saavy you are with systems, but if you get stuck just ask me...
Once it boots up, to basically it's own operating system (Linux Flavor), it will have an option to use the password removal tool called "winpass". This tool, or command really, has many options, but I would just run it from the main menu to start with, option 3 possibly?... This will then search the disk(s) installed, mount the OS and allow you to remove the password completely. The site also has a bunch of How-to's to get you going, but it's fairly straight forward once you get comfortable with it. This program should work for most windows operating systems and also Linux too I recall.
For wiping drives, it depends on what level you consider securely wiped and tested. For testing purposes, a used drive to me falls into three categories, each with different levels of time/effort/expense. If you can do a low level format on a drive and it passes without errors, and is also not a noisy drive, then typically in most cases it's going to last a while and a decent one to resell as used. A very minimal amount of these tested this way will fail within a year based on my past experience. Now, the way I used to test was much stricter for certain companies, but "true" testing requires a software package that can put stress on the drive, read and write the entire drive, and requires the drive to run an hour or more (sometimes overnight for one pass) to complete. Software for this I have not used in years and it was also designed for high end server drives, Like Sun Microsystems etc, not Windows. SiSoft Sandra used to be a decent stress testing software for Windows, not sure as of late.
As far as cloning goes, Acronis is your best friend on many levels, including backup of your systems for the business. Buy yourself a cheap NAS drive @TB or so.. plug it into your network, create a shared drive folder, and start building an image database for yourself. Acronis take a full snapshot of an entire system, everything, and backs it up to a single (large) file. If I am building out machines, I build one from scratch, install all patches, etc...then image it with Acronis to my NAS drive. I save the file as the machine type, for example, DELL_INSP_4200_XP_PRO. I now have a standard profile build for any dell inspiron 4200 systems I received. Then I plug in all the systems, say 5 at a time, boot all of them with a copy of acronis, point the acronis to the nas image for those machines, and let them restore. Same copy, standard, and fast. Like 15 minutes to restore a system. So if you had 5 of the same machine, you built one in 2 hours or less and 4 more in about 15-30 minutes, and now also have a machine profile on file for next time you get that machine type. Windows must be restored to a machine with the same architecture or it will blue screen on you. Typically it's mainly based on the motherboard and chipset type. I prefer to only invest time into Dell's mainly, they are extremely common and easy to install. Trying to find restore cds for a sony, toshiba etc is a pain. I just boot those quick, and then strip for parts on
ebay. Having just one Dell restore cd can restore many many different dells (need drivers afterward), but they are easy. Other Dells just have a hidden clean restore image already on the drive which can be invoked with a cd at all; it will roll the system right back to factory setup.
I can ramble...I know...
Wiping... different standards for this, but for a safe general wipe that's not too time consuming.... Let me back up, to explain a bit more about drives and their data; the concern for security on drives is high today...
Drives have space, we use it, data is stored there. When we delete something, it doesn't go anywhere, it stays right on the drive. Only one thing happens when you "delete" a file. That file, say a picture, is stored normally as this picture viewable to you on the system. This file that is still in use is marked in the background (on the drive) as an occupied space on the drive in use with a "1". 1 meaning, when there is new data to be written to this drive, do not write data in this space, or any space marked with a "1". You delete this picture. The picture is now marked with a "0". So now this space is available to be written to at any time (or possibly never at all?) So the data is still there physically, just not accessible to anyone easily (I have means to recover this by the way)... Anyways, so the data is never truly removed, it's just allocated as new space to use in the "free space" pool. So say you save a new file, and it overwrites this previously use space for your picture. It is STILL not gone... The DOD and others claim that data can be recovered from a drive that has been over written up to like 13 times or so.. it's a lot... and can still be recovered...So truly, the only way to wipe a drive and still have it usable is the following...
Mount or install the drive as a secondary one in an existing booting system.
Then perform a full (not quick) format on the drive
Then run a tool called Ccleaner (free) with the settings to securely erase the entire drive. There is many settings for this, but I use the setting that does at least 15-20 passes. it can do up to 35. A pass is where this program will write fake data on the entire drive in every sport, then do it again, etc... up to 35 layers deep. There is no equipment I am aware of that can recover data from any drive that has been passed at least 12+ times..
In a nutshell though, you can see the time involved in this whole refurb process to do things in a compliant way. I am the thorough type, so compliance is an issue for me. A lot of guys make a lot more sales than me for certain items, but it's because I will not invest that amount of time into something with such a small margin. I could easily spend 10 minutes on a used system and make it appear to be cleaned, but it's not. I would make more money for certain, but now I am out of compliance. I try to find creative ways to make a good rate with minimal time and the least amount of headaches. I could pump out a ton of refurb systems rather fast in some cases, but now, do I want to take the calls when the end user does something wrong and I have to hand hold them through the whole process of convincing them in a polite way that its not OUR equipment, it's you? lol...service sucks and swallows up profits. I would rather make 25-50 on a system board alone then 75-125 on a system all day long. Its just a part, so it works or not, not much to support there. But, you sell a solution, a system, and now it increases risk to support and for returns or unhappy people.
I'm ranting, but mainly pouring out my experience over the years. My weakness has always been marketing, not so much tech stuff...and I am glad to share and help any way I can. If you can deal with the rants and jumping all over the place
-Steve
Bookmarks