RE: Restricting the change of the local administrator account pas sword.

From: Bob the Builder (builder173_at_hotmail.com)
Date: 05/07/04

  • Next message: Rob O'Connell: "Re: RE: Restricting the change of the local administrator account password." 
    To: mchorazy@depaul.edu, focus-ms@securityfocus.com, glenn.wolf@we-inc.com
Date: Fri, 07 May 2004 11:01:17 +0000

    Hi Slawek,
    Care to share the exact registry setting to do this? I haven't heard of it
    before and can see it being very useful.

    Cheers,

    Bob

    -----Original Message-----
    From: Miroslaw Slawek Chorazy [mailto:mchorazy@depaul.edu]
    Sent: 05 May 2004 22:13
    To: focus-ms@securityfocus.com; glenn.wolf@we-inc.com
    Subject: RE: Restricting the change of the local administrator account
    pas sword.

    this is possible if you have not implemented a change in the registry
    via policies or manually which any sensible administrator would years
    ago...

    slawek

    >>>"Wolf, Glenn" <glenn.wolf@we-inc.com> 5/5/2004 12:09 >>>
    By the way, a user with no Administrative privileges (but who has
    physical
    access to the machine) can change the local Administrator password
    anyway
    through a nifty little Linux-based boot disk:

    http://home.eunet.no/~pnordahl/ntpasswd/

    It boots up, and among other things, allows the user to reset any local
    user
    password (including Administrator or renamed Administrator).

    Glenn

    _________________________________________________________________
    Check out the coupons and bargains on MSN Offers! http://youroffers.msn.com

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Rob O'Connell: "Re: RE: Restricting the change of the local administrator account password."

    Relevant Pages

    • Re: Must all users be administrators?
      ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
      (microsoft.public.windows.server.sbs)
    • RE: AW: Security issue in Windows 2000?
      ... Change the local administrator name on the workstations i.e. local_admin ... If you want to prevent other local server ... > Evaluating SSL VPNs' Consider NEOTERIS, ...
      (Security-Basics)
    • RE: Users and Groups
      ... > To narrow down the problem, please create a local administrator (not domain ... > This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
      (microsoft.public.windows.server.sbs)
    • Re: Program needs Administrator access
      ... application folder itself in the program files folder. ... administrator because I have 1000 users. ... to make every authenticated user logon with local administrator ... even if you are giving everyone the admin rights. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Desktop Slow to appear After Demoted Domain Controller
      ... If you choose last DC in the domain then the new local administrator could ... user profile it does not mean the system is in other way confused about your ... > This machine has just been acting strangely since the DCPROMO, ...
      (microsoft.public.win2000.general)