Re: Registry hack to disable password change

Terry Caleb wrote:
I used to be able to do this on Windows2000, but do not find the
registry settings or the offsets for Windows2003. What I would
like to do is be able to set a password on an account, and to not
allow anyone at all, including other administrators, to be able
to change the password or the account name. I have searched
through pages upon pages of articles, but have not found
anything. Is this still possible?

Shenan Stanley wrote:
Still?

I am pretty sure you could not do that in Windows 2000 either. If
someone is an administrator, they can do whatever they want to
anything on the machine *except* mess with encrypted files (at
least not get into them without the backed-up certificate from the
account that encrypted them, etc.)

Terry Caleb wrote:
I have written down a registry hack that I used to use to change a
bit in the registry that would not allow ANYONE to change the
password (I think also change the username also, but I never tried
it.) of a user, regardless of their credentials. That included
Domain Admins and everything.

So don't be shy - post it.

I assure you, however - if you can do it as an administrator - anyone with
administrative rights on the same computer can get around it/undo it. If
they have administrative rights on the computer - other than encryption -
you cannot do much to control what they can/cannot do on the computer.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


.

Relevant Pages

  • Win 2008 registry problem
    ... the applicationare unable to save their registry settings. ... Administrator account. ... Administrator', then it starts and runs ok but of course it has the ... Administrator's configuration, not necessarily what I want for the second ...
    (microsoft.public.windowsupdate)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)
  • Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... one referencing the original administrator account: ... specific policy setting that was flagged with a big, ... I used an incorrect procedure to rename the ...
    (microsoft.public.windows.server.general)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... Did you check the Group Policies for references to the Administrator ... Administrator account? ... what policy do you have? ... referencing the former administrator account. ...
    (microsoft.public.windows.server.general)
  • Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... Did I check Group Policies for references to the Administrator account? ... enabling the Rename Administrator account policy in Group Policy. ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)