Re: c$

From: andy smart (anonymous_at_discussions.microsoft.com)
Date: 06/13/05


Date: Mon, 13 Jun 2005 14:31:12 +0100

Steven L Umbach wrote:
> Thanks for clarifying that Herb and of course you are correct and is one of
> the reasons why I thought that he might want to rethink disabling the admin
> shares since domain admins can often find them useful. -- Steve
>
>
> "Herb Martin" <news@LearnQuick.com> wrote in message
> news:%23YXcHxRbFHA.1600@tk2msftngp13.phx.gbl...
>
>>>The C$ is available only for a user that is a local administrator on the
>>>computer and can come in quite useful. The administrative shares can be
>>
>>The above is technically accurate (sort of) but implies that the
>>domain admins are not included, which they are.
>>
>>Technically, domain admins ARE "local administrators" (if not THE
>>local adminstrator) of the computers which are members of the domain.
>>
>>Doman Admins can use C$ etc.$ also.
>>
>>
>
>
>
We find the administrative shares very useful on our network - we
connect to local workstation hard drives over the network all the time
to look at stuff.



Relevant Pages

  • Re: Security permissions bug or inheritant permissions??
    ... We had four domain admins for the 8 domains in our forest. ... four guys who were Enterprise Admins. ... management and security folks don't fool themselves with a perception of false ... that doesn't mean that everyone should be domain> "gods" - they should heirarchal structure that enforces layered security> levels - even among domain admins. ...
    (microsoft.public.win2000.active_directory)
  • Re: NAT is not a mechanism for securing a network.. but.. HELP!
    ... tell you a NAT router is a firewall. ... > There is this one hot chick at a major American news network, ... >proxy, and come to a chat room where her and I have been chatting, she has ... >admins at the station she works for. ...
    (comp.security.firewalls)
  • Re: March 29, 2006 total eclipse - IT admins WORST NIGHTMARE
    ... > For corporate IT admins in Europe, this will be their WORST NIGHTMARE ... > can be shut down without cutting off ALL web access to the network. ... > Basically, people will be watching the eclipse, and gobbling down HUGE ... > amounts of bandwidth. ...
    (comp.security.firewalls)
  • RE: software to control domain administrators
    ... Trustworthy Admins already do this with the explicit knowledge that they ... reverse that auditing, which the auditing mechanism should reflect ... Honestly, if you are looking for something to audit domain admins, then ... Si ha recibido este mensaje por error, ...
    (Security-Basics)
  • Re: March 29, 2006 total eclipse - IT admins WORST NIGHTMARE
    ... >> For corporate IT admins in Europe, this will be their WORST NIGHTMARE ... >> the eclipse without shutting down the ENTIRE NETWORK. ... >> can be shut down without cutting off ALL web access to the network. ... and other software based firewall programs can do. ...
    (comp.security.firewalls)