Re: Where is Local Group Assignment Stored?

On a tangent, you might want to consider getting your powers that be
to up the schedule for W2k to W2k3 upgrade. A number of issues in
W2k were addressed with W2k3. For example, one can disable the
built-in Administrator in W2k3, making it of use only for a safe mode
boot local console login, and one can restict use of the domain built-in
in ways not designed into W2k.

I'm with you on that, but migrating a domain from W2K to W2K3 is time
consuming unless you do it constantly, and my time is a premium. But in
the big picture we must do it sooner than later.


Re the builtin as you have it, if it is set to require smartcard even if
you do not have smartcards, what happens ?

The smartcard option is greyed out and not available to the BUILTIN domain
Administrator account in W2K.

--
Will


.