-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of neil.daugherty@xxxxxxxxxxx
Sent: Wednesday, August 29, 2007 9:21 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Access to AD systems
Using AD I have systems that I am suppose to have admin rights to but
when I run a scan on the directory with Harris STAT 5 I get a reply of
no reg and no file access. I am currently unable to manage this systems,
there is a GPO that is getting pushed down to the systems but it is
still not activating the admin access. The only thing that I can come up
with is that the admin account is not present on the system or the
systems windows firewall has reactived it self some way. What could be
other possible reasons for this.
Thanks for your assistance.
"NEVER GIVE UP"
NEIL DAUGHERTY,
SFC, USA
HI Regional Network Operations And Security Center NCOIC
Office: 808.655.2119
DSN: 315.455.2119
Commercial: 808.557.1909
Fax 808.664.0802
Re: Error message trying to download ... This posting is provided "AS IS" with no warranties, and confers no rights.... I can not apply any updates on any machine in the domain. ... I also tried to log on as the local admin account - still ... I then logged on locally with a local admin account.... (microsoft.public.windowsmedia)
Re: How can I change the admin password of all our XP PCs on the doma ... You don't go to each workstation and check if that user changed the local admin password.... If the box has a problem that means you can't use a domain admin account to logon, it is usually quicker to rebuild than troubleshoot. ... If you want to control the Local Administrators on the workstations, just disable the Local Administrator, and then use another GPO or Script that adds a existing security group in your AD as member of the local Administrators on the workstations. ... (microsoft.public.windows.server.active_directory)
Re: Group Policy Editor ... don't want to let guests run in an admin account.... If you mean *some* programs - group policy isn't where you do stuff ... Oh - and don't forget to complain to the product developers about ... (microsoft.public.windowsxp.security_admin)
By-pass security settings on a standalone computer ... access to the other admin account).... I did mention the the boss about being able to do things if there was ... > changing or removing the Admin password does remove access for the = ... (microsoft.public.windowsxp.security_admin)
Re: How can I change the admin password of all our XP PCs on the doma ... If the box has a problem that means you can't use a domain admin account to logon, it is usually quicker to rebuild than troubleshoot. ... Laptops will present special requirements that may make you want to bend the rules for them but I think the idea of disabling the local admin account has its merits. ... If you want to control the Local Administrators on the workstations, just disable the Local Administrator, and then use another GPO or Script that adds a existing security group in your AD as member of the local Administrators on the workstations. ... (microsoft.public.windows.server.active_directory)
