Protection for your Windows PC

Some weeks ago in the Directory Services newsletter, I discussed the possibility of proximity cards (those cards you hold up to a plate to unlock a door, for example) merging with smart cards (such as the credit cards with an on-board CPU for real-time authentication) as a way to enforce logouts when someone walked away from their computer.

Even I am prone to the old saw (that's a pun, son) that when your only tool is a hammer, every problem looks like a nail. Maybe, just maybe, a proximity card-cum-smart card is overkill for the problem.

The problem, as originally stated, was how to secure a workstation when the user walks away. It's a common problem in most enterprises and usually the biggest offenders are the ones with access to the most sensitive information (i.e., The Powers That Be, The Big Guys, the Honchos - the CxO). Frequently, the best you can do is to integrate a password-protected screensaver that uses the user's logon password to unlock.

My solution used the proximity card functions to log out the user when they moved away from the computer, then bring up a logon screen when they returned while using the smart card to automatically log them on. It's a lot of functionality, but it isn't going to be cheap.

Turns out, similar functionality (it won't automatically log you on) is available for under $100 per PC, in quantity. There's a company in Elgin, Ill. that's marketing an ultrasound enabled device to automatically log out a user who leaves their desk and automatically present a logon screen when they approach the desk again.

ComputerProx's TF2000 plugs into a USB port on any 32-bit Windows machine, and identifies itself as a keyboard. Under Windows 2000, for example, when the ultrasound device detects that the user is moving away from the computer, it issues a Ctrl-Alt-Del <enter> sequence that locks the computer. You could also configure the device to issue another Ctrl-Alt-Del (bringing up the logon screen) when someone approaches the computer. No need to configure " time out " parameters for a screen saver (which always seems to pop up while I'm reading a document on screen) or worry about the time lag between the user leaving the office and the screen saver kicking in. The TF2000 is constantly monitoring and will kick in whenever the user moves away (the distance is configurable from 14 inches to 60 inches).

No need to build in multiple devices, no need to remember to carry a card, no need to possibly compromise directory security. Just plug and go! Check all the details at the Web site (www.computerprox.com/TF2000.htm) and see just how easy it is.

There's a variant on the " old saw " I quoted, which goes " When your only tool is a hammer, it's time to get a new tool chest. " You'll be surprised at what's in the hardware store these days.

Dave Kearns is a writer and consultant in Silicon Valley. His most recent book is "Peter Norton's Complete Guide to Networks" published by SAMS. Dave's company, Virtual Quill, provides content services to network vendors: books, manuals, white papers, lectures and seminars, marketing, technical marketing and support documents. Virtual Quill provides "words to sell by..." Find out more at Virtual Quill or by e-mail at info@vquill.com