Re: BIG Security Problem?

From: Larry (larry@cwxonline.com)
Date: 08/01/02 

From: "Larry" <larry@cwxonline.com>
Date: Thu, 1 Aug 2002 10:03:26 -0700

Yes

I logged out than back in.....

The login is DEFINATLY not getting local admin
permisions...

>-----Original Message-----
>Let me ask a stupid question... you did log out and log
back into Windows
>before attempting to test what the domain admins could
and couldn't do? The
>permissions aren't removed until that happens. Also, I
assume you're
>certain that the login ID you're using isn't getting
local admin permissions
>by being in some other group?
>
>"larry" <larry@cwxonline.com> wrote in message
>news:3d5c01c23910$38594670$37ef2ecf@TKMSFTNGXA13...
>> I removed domain admins from the local administrator
group
>> of a member server and they are denied access to
>> everything EXCEPT they are ABLE to add and remove users
>> from Local Users and Groups!!!!
>>
>> They can change the local admin password and even add a
>> new administrator account to the member server!!!!
>>
>> I have fully removed domain admins from the member
servers
>> local admin account...How can I stop domain admins from
>> accessing this memebr servers user and groups?
>>
>>
>
>
>.
>

Relevant Pages

  • Re: File Share security permission
    ... If the permissions are for domain admins and you are using a local admin ... Could anyone advise on general good practice security permissions to set ...
    (microsoft.public.windows.server.general)
  • Re: Trouble installing KB840374
    ... "Paul L Fisher" wrote in message ... >> Looks like a permissions issue, because the installer tries to back up ... >> What happens if you try domain admin vs. Local admin account? ...
    (microsoft.public.windows.server.general)
  • Re: NTFS Security
    ... restrict access to data on USB sticks to users of your domain by setting ... NTFS permissions? ... but you can access it by taking ownership. ... > the local admin from another domain/workgroup from accessing the data. ...
    (Focus-Microsoft)
  • Re: folder permission
    ... What I want is that a folder in each user computer be accesible only by the ... local admin group of each computer (we added the user to the local admins ... Documents available to all accounts? ... >> system to apply permissions to "computers" within the scope of influence ...
    (microsoft.public.win2000.security)
  • Re: Set security on C: to everyone deny full control, can not boot
    ... and b) restrictions always take precedents over permissions. ... > Control, Create, Update, Read etc.). ... Local Admin was still ... > tab the tab was no longer available. ...
    (microsoft.public.windowsxp.security_admin)