User removed Domain Admins group

From: mouser (anonymous_at_discussions.microsoft.com)
Date: 05/27/04 

Date: Thu, 27 May 2004 11:46:43 -0700

I am a Domain Admin for our company, and
in our network, we have several external offices
throughout the world, and each user has a machine on
active directory that they use. We grant these users local
machine admin rights to their PC.

We are no longer able to access one PC because the user
has removed the Domain Admins group from the local
Adminstrators group on the machine. He also changed the
administrator password. We can still bring up computer
management and see the groups and users, but I can't add
anything.

Is there any way to get access to this machine again
without the use of any hacking tools?

Relevant Pages

  • Re: Security best practice help!!! local admin addition!
    ... Phil ... Domain administrators need to run backup software across the network ... Where is that Domain Admin password stored now? ... >> members of the local administrators group!!! ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Direct Access to SBS from Client Computer
    ... Does the user have domain admin or local admin permissions? ... Merv Porter [SBS-MWP] ... Change button) to join the network again. ... What's the best way to setup the client computer to be able to ...
    (microsoft.public.windows.server.sbs)
  • Re: Security best practice help!!! local admin addition!
    ... My personal favorite is how local administrators can see in plain c l e a r ... Domain administrators need to run backup software across the network ... Where is that Domain Admin password stored now? ... Please give me your opinions on this and what your ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... Remember that a "rainbow table attack" against a cached domain ... then over time through precision monitoring of network ... Anything that does an interactive logon will store cached credentials, ... domain admin account credentials), is a credential cached anywhere for the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cached login credentials
    ... Remember that a "rainbow table attack" against a cached domain ... then over time through precision monitoring of network ... Anything that does an interactive logon will store cached credentials, ... domain admin account credentials), is a credential cached anywhere for the ...
    (microsoft.public.windowsxp.security_admin)