The requirements that we were given were:
- Get it working (yesterday)
- Restrict Access to authorized personnel
- Data Must be Encrypted
- At Rest
- In Transit
- Data must be able to be exported.
- Essentially printing needs to occur from this machine.
DOS was before my time as an Administrator, the least I have to learn and poke at it the better. We run a Windows Active Directory Domain at work. We decided to take the following steps to fulfill the requirements.
- Work on it right away ( we can't commit an actual time)
- We decided to run VirtualBox on top of a machine that is already on our domain. We restricted access to this machine using Group Policy Objects. I provide a bit more info what steps I took to get this DOS machine up and running in VirtualBox.
- At Rest Data will be encrypted with BitLocker, in turn encrypting the VMDK file that Virtualbox will use. We did not go the route of using VirtualBox encryption option. RDP will make sure that data in transit will be encrypted.
- This is where it got a bit tricky, I though to myself I'll create a virtual floppy and then save to it, I ran into issues with the floppy being write protected. I then thought about messing with USB sticks, but then I realized that we can look inside the VMDK file and export files that way.
- PowerISO actually is able to do this. The process would be to make a copy of the VMDK, open the copied VMDK within POWERISO browse and export the files to the local guest operating system ( Windows).
- Users can do what their hearts desire with these files are , in this case print.
The process of getting the Virtual machine running within Virtual Box was.
- Create VM
- Use BART PE boot disk with GHOST available on it.
- I could not inject the Ghost Image to the BART PE CD/ISO, so I created another ISO with the image on there.
- Attach both CD's to the VM and boot from the BART PE CD/ISO.
- Use Ghost to Image the hard drive with the image that is located on that second CD/ISO
- Here are the images of the settings:
