Re: Permissions

The local admin account and password are in sync. This is yet another reason why different admin accounts should have different passwords.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

============================================================================
Do not read this worthless blog entry on
Defending Security Infrastructures http://blog.joeware.net/2006/07/11/445/
I'm serious, you will learn absolutely nothing about
Defending Security Infrastructures.
============================================================================

PL wrote:
I don't understand something... I have a file share on a server with
full control share permissions but limited NTFS permissions propagated
all the way down through the structure. NTFS permissions are full
control for administrators and system, read-only for domain users. It
mostly works as expected, however, why is it that when I log in to
another server within the same domain with only the local admin
account, I can edit all files within the share.

Thanks,
Pete
.

Relevant Pages

  • Re: Groups
    ... It is a bad idea to add normal users to the admin account, ... legitimate reasons to add certain users to the local admin accounts. ... Power Users can install most - but not all - software. ... Free Computer Help - http://forums.techarena.in ...
    (microsoft.public.windows.server.active_directory)
  • Re: Best Practice for Domain & Local Admins
    ... are you referring to the Security one within Event Viewer that can be included in mailed reports? ... 3)I'm guessing the answer is yes, but should the pass phrase philosophy be set for BOTH domain AND local admin accounts? ... Make that admin account a passphrase. ... Any administrative tasks that need to be accomplished on local machines would use the local admin account. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Premium, user changes password and loses network share access
    ... If no local admin account, log on as a domain admin. ... profile that has local admin permissions on the workstation. ... Merv Porter [SBS-MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: Install program at startup
    ... Will the HKLM\RunOnce run as a local admin? ... When I logged in with an admin account, ... prefixed with an exclamation point to defer deletion of the value until ... command line is run unless overridden as noted above. ...
    (microsoft.public.windowsxp.general)
  • ISA Permissions
    ... The ISA is AD Mode. ... I Installed isa with local admin account, ... domain admin account, I put domain admin account in the ...
    (microsoft.public.isa)