Re: Domain admin rights

From: Steven L Umbach (n9rou@attbi.com)
Date: 11/16/02 

From: "Steven L Umbach" <n9rou@attbi.com>
Date: Sat, 16 Nov 2002 01:33:15 GMT

Hi Kevin. You could remove the domain administrator from the local
administrator account on their computer and then change the password for the
local administrator and they could not access that account. However it is
not hard to crack the local administrator account (see the daily posts on
this newsgroup) if they have physical access to the computer which they
probably do. It is up to you, but if possible I would recommend a written
policy and threats also. Unathorized access to a T1 could be considered
theft of a service. --- Steve

"Kevin" <aragorn561@hotmail.com> wrote in message
news:274701c28cde$c7042080$8af82ecf@TK2MSFTNGXA03...
> Hello all,
>
> Is there a way to prevent users from chagning their IP
> address without denying them any other admin priveleges
> when logged in to the domain? We figured out how to do it
> when logged in locally, but the students need admin
> priveleges to do some work, and then some users change
> the IP addresses to get out thru our T1 connection
> instead of our DSL connection
>
> Kevin

Relevant Pages

  • Re: Remove Administrator Account from Administrators Group
    ... password for the local Administrator account. ... A more security issue is to have random password. ... We figure that renaming the Administrator account is not ... A major element of our group policy is ...
    (microsoft.public.windows.group_policy)
  • Re: Remove Administrator Account from Administrators Group
    ... password for the local Administrator account. ... A more security issue is to have random password. ... We figure that renaming the Administrator account is not ... A major element of our group policy is ...
    (microsoft.public.windows.group_policy)
  • Re: Remove Administrator Account from Administrators Group
    ... password for the local Administrator account. ... A more security issue is to have random password. ... We figure that renaming the Administrator account is not ... A major element of our group policy ...
    (microsoft.public.windows.group_policy)
  • Re: Remove Administrator Account from Administrators Group
    ... rights for employees ranging from the receptionist to high-level IT staff, ... to rename the local Administrator account. ... A major element of our group policy is that it ...
    (microsoft.public.windows.group_policy)
  • Re: Remove Administrator Account from Administrators Group
    ... Local policies ... A major element of our group policy is that it will push down the local Administrators group, which will contain a domain group for Network Administrators so that we will have administrator rights to all machines. ... the local Administrator account is a member of the Administrators group that is pushed down by the group policy. ... Our security officer would like us to either remove the local Administrator account from the group policy, or push it down under a different name. ...
    (microsoft.public.windows.group_policy)
Quantcast