Re: Where is Local Group Assignment Stored?

"Will" <westes-usc@xxxxxxxxxxxxxx> wrote in message
news:rbadneANGavSXHDYnZ2dnUVZ_tmknZ2d@xxxxxxxxxxxxxxx
"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:%23dKDvYAYHHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
Right. However, simply giving it a long password (I use a tool the
genreates, given n a pseudo-random phrase n char long). It is more
simple to monitor for password change, logon/use than for change
to memberships of a number of groups used to guard the user rights.

Is there a simple tool available that will monitor logins, and that
would -
for example - send you an e-mail every time an attempt to login with the
builtin administrator account takes place?

I'm all for leaving the account intact as long as I can get immediate
notifiication when someone starts to try to break in. In fact, it might
serve as a kind of honeypot as long as the notifications are immediate and
reliable.

You might want to look into what MS is doing with System Center
(and its heritage in MOM). There are third-party also, but what MS
is doing with security event log centralization does an end run around
admins (or those with admin) attempting to disrupt what is in the per
machine locally stored security log.

On a tangent, you might want to consider getting your powers that be
to up the schedule for W2k to W2k3 upgrade. A number of issues in
W2k were addressed with W2k3. For example, one can disable the
built-in Administrator in W2k3, making it of use only for a safe mode
boot local console login, and one can restict use of the domain built-in
in ways not designed into W2k.

Re the builtin as you have it, if it is set to require smartcard even if
you do not have smartcards, what happens ?
Roger


.

Relevant Pages

  • Re: [SLE] SuSE Installation runs monitor Out of Range
    ... I was doing this on a 15" travel monitor at the local yesterday. ... > This is not a new problem for the 9.1 Installation; ... > the system configuration had been recognized as and set to VESA ... if one cannot do a graphical login because of running ...
    (SuSE)
  • Re: Grab A PTS terminal session
    ... user - or to transfer the running program/process so it continues to run ... The command nohup should guarantee this. ... The next person to login can monitor the output by looking at results.txt. ...
    (uk.comp.os.linux)
  • Re: Password expiration and non-interactive access question
    ... I see an account with NETWORK access only allowed and a recent network ... but a finite passwordlifetime and a password change date in 1997, ... There is no way for a NETWORK login to change the password, ... Unofficial OpenVMS Hobbyist Support Page: ...
    (comp.os.vms)
  • Re: black screen
    ... Also change the monitor to see if the problems go away or remain. ... Microsoft Windows Small Business Server 2003 Best Practices Analyzer ... How to Use the Windows SBS 2003 BPA ... When you press control alt del a black login screen appears. ...
    (microsoft.public.windows.server.sbs)
  • Re: Monitor troubles in linux.
    ... > Alright well, I have been running a dual booted ubuntu 5.04 with xp for ... > it loads all my user settings i guess, because right before the login ... I tried booting up from the livecd and the monitor runs fine. ...
    (alt.linux)