RE: Local Administrator Rights

From: Fink Edward G Civ HQ AFMC/CEPR (Edward.Fink@wpafb.af.mil)
Date: 02/12/02 

From: Fink Edward G Civ HQ AFMC/CEPR <Edward.Fink@wpafb.af.mil>
To: "'Mark Villanova'" <mvillanova@i3mobile.com>
Date: Tue, 12 Feb 2002 15:02:03 -0500

Check out ERD Commander from Winternals at http://www.winternals.com/products/repairandrecovery/

-----Original Message-----
From: Dave Bujaucius [mailto:bujauciusd@gliatech.com]
Sent: Friday, February 08, 2002 2:47 PM
To: security-basics@securityfocus.com; focus-ms@securityfocus.com
Subject: Local Administrator Rights

I thought the domain administrator logging in on a Windows 2000 machine
automatically was granted local administrator rights. Someone who
doesn't work here anymore removed domain admin privilege from the local
admin group on several W2K workstations. The only member of the local
admins is now the local administrator. For some reason they made the
domain admin a member of the local power users group. I don't have the
local admin passwords on these machines, they could be anything. I
cannot uninstall or install applications from these workstations.
Anyone know of a way for a domain admin to force their way into the
local admin group? The alternative is to reinstall 2000.

Thanks,
Dave

Relevant Pages