Preventing from accessing data offline from live CD

[farjibaba]

@ steveraily

Thanks you my dear friend for your much effort to type this. I am agree with you we can not harden 100% but we can restrict.

Can we do this restriction from boot loader I mean is windows is installed then boot loader must not show the option to boot from previous OS or like this

[SteveRiley]

those people has refused to tell me the method that how they have done.

That's mean. I see no value in concealing this information from others. Or perhaps they're worried that their protection measures aren't good. If you know what they're doing, then you can also devise ways to work around it.

Can we do this restriction from boot loader I mean is windows is installed then boot loader must not show the option to boot from previous OS or like this

You need to understand the differences between a boot loader and a boot manager. Each operating system will have its own boot loader. The boot loader's job is to begin early phases of hardware initialization, load the kernel into memory, and hand off execution to the kernel. A boot manager maintains a list of all installed operating systems and allows you to select the one you want when you boot the computer.

In modern PCs, the firmware includes a built-in boot manager. The boot manager will detect and boot every operating system that has registered its boot loader with the firmware. To restrict the ability for users to install and register additional operating systems, you have to protect the firmware from changes. The only way to that is to use the firmware's power-on password feature. But remember what I wrote earlier: it is trivial to remove the firmware password.