Deny Logon by Domain Admin account to specific PC's or deny to all BUT specific PC's

From: Hindle, Dallas (Dallas.Hindle_at_bakersdelight.com.au)
Date: 11/11/05

  • Next message: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]: "Re: What server hardening are you doing these days?" 
    Date: Fri, 11 Nov 2005 12:15:43 +1100
To: <focus-ms@securityfocus.com>

     

    Hi all

     

    I assumed this was easy but I must be missing something...

     

    I have a domain admin Account that is used for Services, SQL Processes,
    Scheduled Tasks and for automated logons for some proprietary
    software... This account has had the password leak out to a 3rd party
    whom has decided to share it with other people in the company.

     

    As I'm sure you agree I need to get his account locked down ASAP, I want
    to prevent logon to this account from any pc's other than the ones I
    authorise, and I though this was a simple process, I don't know what I'm
    missing but if anyone has any suggestions it would be much appreciated.

     

     

     

    Thanks

     

    Dallas

     

     

      

    -- 
Message protected by MailGuard: e-mail anti-virus, anti-spam and content filtering.
http://www.mailguard.com.au/mg
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]: "Re: What server hardening are you doing these days?"

    Relevant Pages

    • Re: Email problem with Verizon DSL???
      ... Even with knowing the piece of info that is missing, there is no way to add it to the FP Form ... FrontPage Resources, WebCircle, MS KB Quick Links, etc. ... >>> I have a form that sends the results to my aol account and a Verizon DSL ... The results of the form make it everywhere but to the Verizon ...
      (microsoft.public.frontpage.client)
    • Re: missing user account
      ... I get a message that says that the local user and group feature is not ... I have also noticed that the missing account type has been changed to guest ... control userpasswords2 dialog -> change user account type to power user. ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Deny Logon by Domain Admin account to specific PCs or deny to all BUT specific PCs
      ... I have a domain admin Account that is used for Services, SQL Processes, Scheduled Tasks and for automated logons for some proprietary software... ... As I'm sure you agree I need to get his account locked down ASAP, I want to prevent logon to this account from any pc's other than the ones I authorise, and I though this was a simple process, I don't know what I'm missing but if anyone has any suggestions it would be much appreciated. ... CONFIDENTIALITY NOTICE: ...
      (Focus-Microsoft)
    • Re: $35 Million of Equipment Missing from NASA.....
      ... Brian Gaff....Note, this account does not accept Bcc: ... > $35M of Equipment Missing from NASA ...
      (sci.space.shuttle)
    • Re: lost files and programs
      ... you're not going crazy but such issues ... access to an admin account. ... Database Developer ... > of my all program page was missing. ...
      (microsoft.public.windowsxp.help_and_support)