Re: BIG Security Problem?

From: karl [x y] (jamescagney90210@excite.com)
Date: 08/01/02 

From: "karl [x y]" <jamescagney90210@excite.com>
Date: Thu, 1 Aug 2002 07:41:07 -0400

Let me ask a stupid question... you did log out and log back into Windows
before attempting to test what the domain admins could and couldn't do? The
permissions aren't removed until that happens. Also, I assume you're
certain that the login ID you're using isn't getting local admin permissions
by being in some other group?

"larry" <larry@cwxonline.com> wrote in message
news:3d5c01c23910$38594670$37ef2ecf@TKMSFTNGXA13...
> I removed domain admins from the local administrator group
> of a member server and they are denied access to
> everything EXCEPT they are ABLE to add and remove users
> from Local Users and Groups!!!!
>
> They can change the local admin password and even add a
> new administrator account to the member server!!!!
>
> I have fully removed domain admins from the member servers
> local admin account...How can I stop domain admins from
> accessing this memebr servers user and groups?
>
>

Relevant Pages

  • BIG Security Problem?
    ... I removed domain admins from the local administrator group ... of a member server and they are denied access to ...
    (microsoft.public.win2000.security)
  • Re: User login problems
    ... Make sure you havent' made them DOMAIN admins. ... makes you a local admin if you run the //connectcomputer wizard ... Brenda wrote: ... > my users into the administrators groups as they need to be to run a program ...
    (microsoft.public.windows.server.sbs)
  • Security Issue
    ... I removed domain admins from the local administrator group ... of a member server and they are denied access to ...
    (microsoft.public.win2000.security)
  • Re: File Share security permission
    ... If the permissions are for domain admins and you are using a local admin ... Could anyone advise on general good practice security permissions to set ...
    (microsoft.public.windows.server.general)
  • RE: Automating Local Computer Admin Rights
    ... become a local admin of all PC's under the OU. ... section it has "This group is a member of:" and there is nothing in there.. ... say you add your 1 group you created to the administrators group on the local ... like the domain admins etc.. ...
    (microsoft.public.windows.server.active_directory)