Re: How to restrict user from downloads, access to display settings, and more w/o domain?

From: John Thompson (john@starfleet.thompson.us)
Date: 01/29/03

  • Next message: Lyal Collins: "Re: Password Cracking" 
    From: John Thompson <john@starfleet.thompson.us>
Date: Wed, 29 Jan 2003 02:37:30 GMT

    In article <b15hdo$4so$1@newsreaderg1.core.theplanet.net>, Sam Bixby wrote:

    > "John Thompson" <john@starfleet.thompson.us> wrote in message
    > news:slrnb3ap8b.dir.john@starfleet.thompson.us...
    >
    >> On Win9x/ME this is pretty trivial security, as any user could re-run
    >> poledit for themselves and remove the restrictions. On NT/2k/XP this
    >> is more difficult.

    > if you set up different users with differing rights then you can set it so
    > that only admin can run poledit. at least as far as i can tell. this is on
    > win9x machines.

    User restrictions in Win9x/ME are very superficial. Simply dropping to a
    DOS box and running poledit from there will allow you to bypass them quite
    easily. And there are a multitude of ways of getting a DOS box on
    Win9x/ME. 

    -- 
-John (John.Thompson@attglobal.net)

    Relevant Pages