Re: Special privileges assigned to new logon??

Yes, you are right that my reply was vague. That is because I am not
knowledgable enough to provide specific advice. I gave you limited advice,
because you sounded desparate. However, I assure you that the limited advice
I give can be trusted.

Why are they a member of the Power Users group? Why not make them a member
of the Users group only?

Paul

"instauratio" <instauratio@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:60EEC5B4-C49E-4605-8637-CF3B880FF9B4@xxxxxxxxxxxxxxxx
> They are a member of Power users. They are not intended to have any admin
> privilege. Forgive me but your reply was kind of obscure. Do you believe I
> have cause for concern?
>
> Do you know anything specific about this particular event?
>
> "Paul Baker" wrote:
>
>> I am not very faimilar this, but I would say that if he is a member of
>> the
>> Administrators group, then this is not alarming. On the other hand, if
>> you
>> intend that he have restricted access, then they should not be a member
>> of
>> this group!
>>
>> Paul
>>
>> "instauratio" <instauratio@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:F944DB90-A9E2-4F1E-AE91-373E4022178C@xxxxxxxxxxxxxxxx
>> >I have a user who works partime during the day. They just started.
>> >
>> > Today, I'm looking through the event log for successful logon or logoff
>> > and
>> > I see the logon name with the event 576
>> > Privileges: SELoadDriverPrivilege
>> > Privileges: SeImpersonatePrivilege
>> >
>> > When I follow the link to microsoft for explanation, I'm alarmed by the
>> > cautionary remarks. In short I think that this is evidence of a hack.
>> > The
>> > user did not login at the specified time, and certainly would not have
>> > the
>> > know how or the rights to assign special privileges. I am the only
>> > admin
>> > here. Can someone please advise me on what I'm seeing?
>> > Thanks
>> >
>>
>>
>>


.

Relevant Pages

  • Re: Is every user a member of Users?
    ... >authenticated users group which is a member of the users group. ... I cannot understand having such a security model where Users/User exist ... You live and learn - thanks for the quick response. ...
    (microsoft.public.win2000.security)
  • Re: Protecting the All Users Start Menu
    ... domain user account objects are members of the local Power Users group. ... I am sure that you know, the Domain Users is, by default, a member of the ... that the user be a member of the local Administrators group. ...
    (microsoft.public.win2000.active_directory)
  • Re: Local Users Group - Safefly removing users ?
    ... what remains in the Users group. ... if only locally defined non-guest accounts ... no. Denying local login is done with the Deny login locally user right. ... Notice that I have a few times qualified with "member" by which I have ...
    (microsoft.public.security)
  • Re: Enable file and folder sharing for the Users Group
    ... >>Log on as an administrator, ... > I want to enable the file and folder sharing for the members of the users ... member of power users. ... users group. ...
    (microsoft.public.win2000.networking)
  • Re: XP slow name resolution
    ... >I have a problem whereby when a user who is not a member of the local ... > Log on as a member of the built in users group only and you can ping ... > IP with an instant response however when you ping via hostname it sits ...
    (microsoft.public.windowsxp.general)
Loading