Re: Invisible Admin account

I doubt you will find any joy along the lines you are considering.
As Danny stated, if they are admin they can undo anything you
have set in place.

If you had a domain then you could enforce some local config
settings in a way that could not be changed locally (like Domain
Admins in Administrators, or specific accounts log in with smart
card only). However such as these are not options for you.

Short of hacking your machines up with your own rootkit-like
functionality, they will as admins be able to see all accounts that
are defined and adjust any aspect of those accounts.

--
Roger Abell
Microsoft MVP (Windows Server : Security)

"cwjudd" <u18680@uwe> wrote in message news:5bd498031370e@xxxxxx
How can I create a local admin account with all administrator privildges
that
cannot be seen or viewed by others. The reason for this is that our
company
insists on issuing all users of all computers admin priviledges so that
they
can install applications as needed, however many of these users like to
change the administrator password on the local machines when they get
their
machines or just before they turn them into us when they are leaving the
company, making it impossible for us to get into the machine and pull data
off of it.

We run a Novell network, however we use a standard W2K Professional
operating
system as our client platform. It would be nice if we could create local
Adminstrator account that another user with administrator access could not
change the password for, or make this account invisible to all other
users.

Any suggestions would be greatly appreciated and welcomed.


.

Relevant Pages

  • Re: Domain Users to have Local Admin rights
    ... Refreshed group policy on the other machines. ... machine, that kinda startup script? ... We have various admin accounts other then administrator ...
    (microsoft.public.windows.server.security)
  • Re: Where to see Administrator Account in XP Home
    ... anyway I can logon as another user (with admin priv) and access the Administrator account config? ... When I try to map the admin share I get a network path not found message? ... This is all because of a network with mostly "pro" machines but a few "home" machines. ...
    (microsoft.public.windowsxp.general)
  • Re: Setting up XP on a domain network - best practices question
    ... or created a new ID with admin privileges to install all the ... Then use XP with full admin rights on the box. ... as the local administrator. ... Do all updates, configuration, and program installations from one of these two local accounts. ...
    (microsoft.public.windowsxp.general)
  • Re: Anti-Virus Software Suggestions
    ... >>> with admin authority. ... All of my photo editing apps, as well as scanning programs work under ... except on the machine where I use different accounts. ... One of my machines operates unattended and in an environment where any ...
    (rec.photo.digital)
  • Re: Domains for UNIX
    ... >> If you are not familiar with Windows Domains, ... >> all machines, users, and other resources within the domain as a group. ... >> Thus, if you are a domain admin, you will have admin rights on any ... > You can share accounts and other information within the domain (like ...
    (comp.unix.solaris)