Re: Remove domain user from local administrators group

From: Harlan Carvey (keydet89_at_yahoo.com)
Date: 10/12/04

  • Next message: Morosan, Bogdan: "RE: Remove domain user from local administrators group" 
    Date: Tue, 12 Oct 2004 10:29:51 -0700 (PDT)
To: focus-ms@securityfocus.com

     
    > We need to remove domain user from local
    > administrators group. Is there any MS utility that
    > allows to do this instead of going to each
    > workstation
    > to remove and assign them to Power Users group?

    You could do this in Perl...and automate the entire thing.

    =====
    ------------------------------------------
    Harlan Carvey, CISSP
    "Windows Forensics and Incident Recovery"
    http://www.windows-ir.com
    http://groups.yahoo.com/group/windowsir/

    "Meddle not in the affairs of dragons, for
    you are crunchy, and good with ketchup."

    "The simplicity of this game amuses me.
    Bring me your finest meats and cheeses."
    ------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Morosan, Bogdan: "RE: Remove domain user from local administrators group"

    Relevant Pages

    • Re: Give Domain Users Local Admin Rights
      ... I know that I could add the indivdual domain user to the ... they do not have local admin ... >> I added DOMAIN USERS to the local administrators group ... >> are logged on to without giving them Local Admin rights ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Add domain user to Local Administrators Group on a workstation
      ... Curt Winter typed: ... workstation in the domain and try and add a domain user to the local ... Administrators Group, it does not show me the domain or allow me to ... via restricted groups & group policy, or even by running a startup ...
      (microsoft.public.windows.server.general)
    • RE: Securing access to network registry
      ... >Thank you for the posting. ... >This is normal because your domain user account is in the ... >registry keys because they are not in the administrators ... >Anyone in the administrators group can have access to the ...
      (microsoft.public.win2000.security)
    • Re: Computer user & domain user
      ... I normally configure two accounts for each workstation. ... Administrators group, it works fine. ... >> software between computer user & domain user in a Windows XP Pro ... > will automatically have permissions for domain users too. ...
      (microsoft.public.windowsxp.network_web)
    • RE: Securing access to network registry
      ... >Thank you for the posting. ... >This is normal because your domain user account is in the ... >registry keys because they are not in the administrators ... >Anyone in the administrators group can have access to the ...
      (microsoft.public.win2000.security)