WinSecWiki > Security Settings > Local Policies > Security Options > Recovery Console > Allow floppy copy and access to all drives and folders
Recovery console: Allow floppy copy and access to all drives and folders
By default, when you are in the recovery console several restrictions are in effect including the ability to copy files from the computer to removable media like floppies. These restrictions are signed to prevent technicians such as from your hardware company from accessing data and applications on the computer which aren’t essential to repairing. Specifically the removable media restriction is to prevent such folks from walking out with data files.
| Environment variable |
Meaning |
| AllowAllPaths |
prevents access to directories and subdirectories outside the system installation that you selected when you entered the Recovery Console |
| AllowRemovableMedia |
prevents access to removable media as a target for copied files |
| AllowWildCards |
prevents wildcard support for commands such as copy and del |
| NoCopyPrompt |
which means that you are prompted by the Recovery Console for confirmation when overwriting an existing file |
This setting, if enabled, allows the operator to turn off these restrictions by setting environment variables with the “set” command in the recovery console. Once enabled, the restrictions are still in effect until the operator sets the appropriate variable to TRUE such as with “set AllowRemovableMedia = FALSE”
Bottom line
Disable this setting if you may have untrusted operators or technicians using the recovery console while unattended.
Back to top