Need help locking down a server

From: "Chris Hall" <someone@xxxxxxxxxxxxx>
Date: Thu, 14 Dec 2006 10:49:57 -0500

Greetings,

I'm looking into options to secure our mail server (Exchange 2003 on Windows
2003). We have an IT staff of 5 people, which includes our dept mgr, all of
which have access to the administrator password and whose accounts are
members of the Domain Admins group. What I propose to do is:

1. Change Admin password, allowing only one person access.
2. Disable Remote Desktop
3. Deny Logon Locally.

The only thing I can't seem to figure out is how to deny all users except
administrator.

If anyone has any suggestions, I'd appreciate it!

.

Follow-Ups:
- Re: Need help locking down a server
  - From: Roger Abell [MVP]
- Re: Need help locking down a server
  - From: Miha Pihler [MVP]
- Re: Need help locking down a server
  - From: Roger Abell [MVP]

Prev by Date: RE: Configured Identity incorrect for COM applications using Windows 2000 server
Next by Date: password login to windows 2000 domain with active directory
Previous by thread: Event ID's 576, 540 & 538 show up w/ user id - user is not logged into that computer
Next by thread: Re: Need help locking down a server
Index(es):
- Date
- Thread

Relevant Pages

Re: Need help locking down a server
... which have access to the administrator password and whose accounts are ... members of the Domain Admins group. ... Change Admin password, ... Deny Logon Locally. ...
(microsoft.public.win2000.security)
Re: Need help locking down a server
... which have access to the administrator password and whose accounts are ... members of the Domain Admins group. ... Change Admin password, ... Deny Logon Locally. ...
(microsoft.public.win2000.security)
Re: Windows Professional
... If this is a domain computer, a user in the domain admins group should be able to ... logon. ... Otherwise you will need to use one of the popular password reset tools. ... > administrator password. ...
(microsoft.public.win2000.security)
Re: Admin Password
... Is anyone else a member of the Domain Admins group? ... I have a customer that's running an older version of SBS on a WinNT ... platform. ... he can't remember the administrator password and we are ...
(microsoft.public.windows.server.security)