RE: Local Administrators

From: Van Meter, John (John.VanMeter_at_ost.dot.gov)
Date: 12/30/03

  • Next message: Steve: "home wireless router good practices for security" 
    Date: Tue, 30 Dec 2003 13:11:11 -0500
To: <security-basics@securityfocus.com>

    Thank you all for the info, but I should have said that I have 1000 workstation to collect the local admin from, that is why I've been trying to come up with a script to pull the info from.

    Sorry
    John
    -----Original Message-----
    From: Jacob McMaster [mailto:jmcmaster@appliedsystems.com]
    Sent: Tuesday, December 30, 2003 12:59 PM
    To: Van Meter, John; security-basics@securityfocus.com
    Subject: RE: Local Administrators

    Right click on my computer, goto manage, then chose local users and groups,
    then groups, and dbl click administrator's, and the users listed is what you
    want

    -----Original Message-----
    From: Van Meter, John [mailto:John.VanMeter@ost.dot.gov]
    Sent: Tuesday, December 30, 2003 4:47 AM
    To: security-basics@securityfocus.com
    Subject: Local Administrators

    Is there an easy way to find out what users are in the local admin group?
    The workstations are Win2k Pro SP4, I was thinking about using adduser from
    the resource kit, but it takes several lines of code to do it that way.

    Thank You
    John van Meter

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: Steve: "home wireless router good practices for security"

    Relevant Pages

    • Re: Must all users be administrators?
      ... Correct me if I am wrong, but GROUP POLICIES override this (local admin can ... I have one workstation that has a user as Administrator and I ... install/add/remove anything, they can't save to desktop, can't change screen ...
      (microsoft.public.windows.server.sbs)
    • Re: SBS 2003 Premium, user changes password and loses network share access
      ... If no local admin account, log on as a domain admin. ... profile that has local admin permissions on the workstation. ... Merv Porter [SBS-MVP] ...
      (microsoft.public.windows.server.sbs)
    • Re: Add the loged in user to the local admin group during logon pr
      ... This was something my predecessor implemented because one of the applications running on the users desktop requires local admin. ... users only logginto their own workstaion so there is no risk to haev soembody logging to someone else workstation. ... This way you only need to change the membership of the group when a new account is created or when someone else needs access. ... I'd probably give the group a name that matches the application and perhaps change the access permissions for the applications folder/files so that only members of that group are even allowed access to the application. ...
      (microsoft.public.scripting.vbscript)
    • RE: local admin compromised
      ... Subject: local admin compromised ... L0phtcrack has a feature that will allow the SMSAdmin user passsword to ... Boot any SMS managed workstation to DOS with a windows 9x boot floppy ... Domain Admin accounts. ...
      (Focus-Microsoft)
    • Re: desperately needing help with a Server Error
      ... I see that it works if you are a local admin on your workstation. ... under Tools/Internet Settings. ... And the .NET framework mentioned is on the server, not your workstation. ... Then open SQL Enterprise Manager, and drill down to this stored procedure ...
      (microsoft.public.dotnet.framework.aspnet)