Security Issue

From: larry (larry@cwxonline.com)
Date: 08/02/02 

From: "larry" <larry@cwxonline.com>
Date: Thu, 1 Aug 2002 18:39:46 -0700

I removed domain admins from the local administrator group
of a member server and they are denied access to
everything EXCEPT they are ABLE to add and remove users
from Local Users and Groups!!!!

They can change the local admin password and even add a
new administrator account to the member server!!!!

I have fully removed domain admins from the member servers
local admin account...How can I stop domain admins from
accessing this memebr servers user and groups?

I logged off and back on ..I have made sure that domain
admins are NOT part of any administrative groups.

Relevant Pages

  • BIG Security Problem?
    ... I removed domain admins from the local administrator group ... of a member server and they are denied access to ...
    (microsoft.public.win2000.security)
  • Re: BIG Security Problem?
    ... before attempting to test what the domain admins could and couldn't do? ... certain that the login ID you're using isn't getting local admin permissions ... > I removed domain admins from the local administrator group ... > of a member server and they are denied access to ...
    (microsoft.public.win2000.security)
  • Re: ACL Issue - Easy Question
    ... In article, Tom Baker ... > I have a situation where a few people need to be in the Administrator group ... > either themselves or other people to the Domain Admins or Enterprise Admins ... > objest and remove the the WRITE and Add Self permissions from the ...
    (microsoft.public.win2000.security)
  • Re: Domain Admin group in ISA 2006
    ... If you can't trust the Domain Admins then the war is already over and you lost. ... ISA would be the last thing you have to worry about. ... subsequently remove Domain Admins from having the ISA Server Full ...
    (microsoft.public.isaserver)
  • ACL Issue - Easy Question
    ... I have a situation where a few people need to be in the Administrator group ... either themselves or other people to the Domain Admins or Enterprise Admins ... objest and remove the the WRITE and Add Self permissions from the ... Any feedback would be appreictaed. ...
    (microsoft.public.win2000.security)