Getting away from administrator account on Desktop



Hello everyone

Our company uses Novell and login script will substitute the users
login with administrator account is the only one on the local desktop
or laptop. I know this is not a standard practice anymore and am
looking for information on what would be a better strategy.

I am sure you all know the security problems this brings about such as:
Anyone who knows the admin password can walk up to any pc that is
logged on to the network, even with screensaver and gain access using
that persons pc, additionally to the network with that users
privileges.

I bet that over there are more people that know the password than
don't know it. Laptop users need the local admin password because it
must be used when not connected to the network. Not to mention that
the password has never changed.

I am just trying to find resources to help me identify what should be
considered when trying to change this and possible strategies. I
need to be more knowledgable about this issue in order to even be able
to discuss possible solutions.

Thanks....
Secsam



Relevant Pages

  • Re: How do I stop admin access from a laptop I worked on?
    ... >I was working on a laptop from an end user in my clients office and while ... > has access to all files on the server. ... > I've changed the admin password on the server and this works but what I ... > really want to do is erase the remembered administrator password from the ...
    (microsoft.public.windows.server.sbs)
  • HELP PLEASE!! Missing or corrupt file
    ... My laptop suddenly couldn't boot anymore, ... After doing some research I accessed the recovery console and tried to ... program that can find the admin password and discovered that there was ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: HELP PLEASE!! Missing or corrupt file
    ... > My laptop suddenly couldn't boot anymore, ... > Now, the computer starts to boot, it shows the XP Home edition loading ... > program that can find the admin password and discovered that there was ... this will enable you to reset any system password on an NT class ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Workgroup/Domain
    ... > laptop to another. ... Any help would be appreciated to get any sort of logon ... If you cannot find the local admin password then you will need to reset the ... > I had a task of transferring My Docs, Outlook settings etc from one> laptop to another. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: How do I stop admin access from a laptop I worked on?
    ... The laptop was not part of the domain. ... > Thank you for posting in SBS newsgroup. ... > domain admin password on your laptop. ... Remove the remembered password to your domain (it should be look like ...
    (microsoft.public.windows.server.sbs)