RE: Windows Share Problem

From: Matt Gibson (Mattg_at_blueedgetech.ca)
Date: 05/06/05

  • Next message: LordInfidel_at_directionweb.com: "RE: software to control domain administrators" 
    Date: Fri, 6 May 2005 09:01:28 -0700
To: <indianz@indianz.ch>, <security-basics@securityfocus.com>

    Yes, you can explicitly deny access to that Admin.

    Realize that anyone will Admin rights also has the rights to go in, take
    ownership, and add himself to the permissions for that file/directory.
    You CANNOT put anything on a windows server that a full admin cannot
    have access to.

    Matt Gibson - GSEC

    -----Original Message-----
    From: indianz@indianz.ch [mailto:indianz@indianz.ch]
    Sent: May 6, 2005 2:10 AM
    To: security-basics@securityfocus.com
    Subject: Windows Share Problem

    Hi List

    Is it possible, in a win2K-Environment (nt4-compatibility-mode is on)
    without active-directory or domain, to grant users a network share on
    the server which an admin (external it-company with remote access)
    cannot see or has access to?

    Thanx in advance.

    kind regards,

    IndianZ

  • Next message: LordInfidel_at_directionweb.com: "RE: software to control domain administrators"

    Relevant Pages

    • Re: Permissions (EVERYONE POST TO THIS)
      ... Removing Admin rights from your users is the prudent thing to do. ... without the IT Administrator providing these services and applications. ... priveledes, and before you know it, you have lost control of your network. ...
      (microsoft.public.win2000.security)
    • Re: I turned off UAC
      ... The User Access Control (UAC) can detect rootkits before they install. ... escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
      (microsoft.public.windows.vista.general)
    • Re: XP & W2K server User rights need help
      ... accounts. ... This narrows the issue, since any admin ... > Here is another fact, this domain server had to be> replaced so a new one was created, in the old domain> server non of the users had accounts only the computers ... >>> Accounts in AD Power users with admin rights to local ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Running Applications and Adming Rights
      ... Again, I didn't give the Domain Admin rights, I am an application developer ... access rights for the install. ... >> the application folders, ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Assigning applications to clients with USER GROUP privilege
      ... > installed when a computer account belongs to the "user group" ... quite happily when users have no admin rights whatsoever (which is annoying ... rather than assigning applications, honestly. ...
      (microsoft.public.windows.server.sbs)