NT and 2000 account policies administrations

From: Pontonnier- White, Sylvie (spontonnier-white_at_TYCO.COM)
Date: 05/11/04

  • Next message: Levinson, Karl: "RE: Virus is getting domain account listing" 
    To: focus-ms@securityfocus.com
Date: Tue, 11 May 2004 10:39:40 -0400

    Hi everybody,

    this is the first time I am asking you for a few words of counsel.

    Question 1
    Under MSW NT and 2000 is there a possibility to restrict certain actions
    that a user having administrator rights might be able to do on the system
    security configuration.

    Example: once the accounts policies has been set up (say min password length
    8 characters), can administrators onto the domain be stopped to make any
    changes to this set up and how?

    Question 2
    Under MSW NT and 2000 can the audit function provide details of any changes
    made to the account policies/security configuration by each of the
    administrators (in this case more then one administrator)?

    Example : Time and date changes was made, ID of the administrator, what
    change was made

    Many thanks for your help

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Levinson, Karl: "RE: Virus is getting domain account listing"

    Relevant Pages

    • I need to undo what I did in Users and Passwords
      ... This is the first time I ever attemped to do this. ... I selected Log off Administrator. ... The User folder is the one that has all of my documents in it. ... it shows that I have two User Profiles stored on my computer. ...
      (microsoft.public.win2000.general)
    • Re: Winforms security
      ... Have the application start in Administrative mode the first time it is run ... Make the administrator to alter the admin password. ... username/password type information was stored on the server. ... think of to store username/password on the local system seems vulnerable ...
      (microsoft.public.dotnet.languages.csharp)
    • all of a sudden I can not log on as administrator
      ... when you boot up Xp for the first time ... XP doesn't show the admin user in the ... users group in the ctrl panel, ... >logging on as the administrator. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Administrtor unable to log in to SBS2k
      ... I haven't made any changes recently to the server, the first time I ... Thank you also, OWA does not allow me to log in as administrator, nor can ... should have said I had created another admin user previously. ...
      (microsoft.public.windows.server.general)
    • Re: Logon password script
      ... > must be changed the first time the system is logged into. ... Are you sure you need to script this? ... Administrator account, there is already built-in support for this password ... change prompt, whether you're using unattend.txt or sysprep.inf. ...
      (microsoft.public.win2000.cmdprompt.admin)