Re: Applied a security policy to standalone XP and strange outcome
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/17/05
- Next message: Steven L Umbach: "Re: VPN users not prompted to change their domain passwords"
- Previous message: Ty Archer: "Monitor Computer/File Access"
- In reply to: Gringo: "Applied a security policy to standalone XP and strange outcome"
- Next in thread: Gringo: "Re: Applied a security policy to standalone XP and strange outcome"
- Reply: Gringo: "Re: Applied a security policy to standalone XP and strange outcome"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 16 Mar 2005 23:07:45 -0600
The hisecure template for workstations will remove all users from the local
administrators group except the built in administrator and domain admins
[for a domain computer] when applied with the Security Configuration and
Analysis tool which is what happened to you. You will need to logon as the
built in local administrator and if you do not know the password for that
account the password reset disk you mention to regain admin access to your
computer. For future reference you can view the security template in the mmc
snapin for security templates to see the defined settings in each category.
More security is not always better. --- Steve
"Gringo" <bkey89@msn.com> wrote in message
news:1110978711.942125.55550@g14g2000cwa.googlegroups.com...
> First of all let me say that this is my first time ever posting to a
> group of any kind so please be forgiving with my inexperience. After
> many years I am changing career fields and going into IT.
>
> Here's my situation...
>
> I have an XPpro stand-alone machine that I was messing around with on
> Snap-ins and the Security Analysis and Configuration. I don't remember
> exactly but 99% confident that I imported and applied the Hisec
> template.
>
> Before the template was applied my user account was the local admin
> account (which was set as admin from the start when I installed XP on
> the machine)and I had 2 other limited user accounts plus 1 guest
> account, all of which showed up on the Welcome screen.
>
> After I logged off I noticed that my user did not show up on the
> welcome screen and neither did the guest account, instead, a
> "Administrator" user appeared with the two limited user accounts on the
> Welcome screen. I clicked to logon as the admin but was unable due to
> not having the correct password (I have no clue what it would be
> because I never setup and "Administrator" user for the machine.
>
> So I began freaking-out and rebooted the system; now the welcome screen
> only shows the two limited user accounts and that's it. Through
> reading this group I found that I could press ctrl-alt-delete twice and
> get the network login, which I did, and logged in with my user account
> name no problem. HOWEVER, my user account is no longer set as an admin
> account and I can't even view my system calendar much less anything
> else.
>
> I downloaded an image to make a boot cd to reset the admin password, I
> will see if it works this evening, but I was wondering if anyone knows
> what would cause my user to be "kicked out" of the admin group on a
> stand alone machine???
>
> Thanks again for the help and forgive me for being long winded and a
> newbie.
>
- Next message: Steven L Umbach: "Re: VPN users not prompted to change their domain passwords"
- Previous message: Ty Archer: "Monitor Computer/File Access"
- In reply to: Gringo: "Applied a security policy to standalone XP and strange outcome"
- Next in thread: Gringo: "Re: Applied a security policy to standalone XP and strange outcome"
- Reply: Gringo: "Re: Applied a security policy to standalone XP and strange outcome"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
