Re: 2K and Laptops

From: Stephen Souza (ssouza@.usa.#Niner.net)
Date: 09/27/02


From: Stephen Souza <ssouza@.usa.#Niner.net>
Date: 27 Sep 2002 09:43:15 -0500


"neo [mvp outlook]" <neo@mvps.org> wrote in
news:ORspVVdZCHA.1860@tkmsftngp12:

> At this time, the only suggestion that I have on the table is
> that we investigate the use of smart cards and readers or locate
> a hardware solution that locks the drive from additional use if
> authentication attempts fail.
>

I have several users with laptops, it is less hassle and no real
difference in security to allow them to have cache logon, If they
have a local and network account odds are it will have the same
password, easier to crack the local account. With the use of cache
accounts you are controling security settings via th4e domain and
not having to manually update local settings.

Part of my configuration updates the local admin name and password
on a monthly basis without them know what the local admin is it
control what gets installed/configured.

-- 
Stephen Souza
remove #Niner from e-mail address


Relevant Pages

  • Re: Domain Profiles Borked - Cant Grant Admin Rights - HELP!!!
    ... > status of their account. ... local Admin rights were given to ... > afflicted machine and give them local Admin rights, ... the SID of your users is no longer the same as it was. ...
    (microsoft.public.windowsxp.setup_deployment)
  • RE: local admin account password
    ... Do you think if someone wanted to break the local admin account they ... more recovery console and don't think cached logins will work. ... 5)My main idea/plan is to store all the passwords on a central SQL server. ...
    (Focus-Microsoft)
  • Re: Distribution lists
    ... Also I have found that making that account the local admin does bupkiss ... local admin rights on the sharepoint server. ... I have made the Sharepoint Central admin app pool owner of the OU I ...
    (microsoft.public.sharepoint.windowsservices)
  • RE: Correct setup of XP-Pro computer on Win2K Domain
    ... Setting up a local account on the xp machine does not result in local admin ... rights for that user, you need to put them in the local admin group. ... > inconsistent problems with security when I setup a new XP-Pro workstation. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Automatically making AD users local administrators on computers in SBS 2003
    ... You have to remember that even though you give the user a different account ... to install software and then they logoff and back in as themselves, ... > can use this special local administrator account. ... >> This will automatically give each user that logs in local Admin rights. ...
    (microsoft.public.windows.server.sbs)