Local admins
From: Peter Clark (clark_at_hushmail.com)
Date: 05/01/03
- Next message: Chris: "811493: Security Update (Windows XP)"
- Previous message: Matt DuBois [MSFT]: "Re: i cant find or open in c:\documents and settings\all users\documents"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 30 Apr 2003 18:37:01 -0700
disabled the server service (and computer browser) and set
permissions on the service to prevent them restarting it.
use tcp/ip filtering and do not include 139 tcp traffic.
>-----Original Message-----
>What version of windows are they running?
>Is this a corperate network? If so then you should make
>them log onto the domain and make them general users with
>special privelages.
>
>You can also create group policies to prevent them from
>doing various things also. I dont know what access they
>need but Im just throwing ideas in the air.
>
>Steve
>
>>-----Original Message-----
>>Does anyone have a way to lock out local admins from
>creating shares? I have
>>some developers that create shares without locking them
>down (ie. everyone )
>>.. These users are part of the local admin group,
>therefore complicating the
>>security. Is there a local gpo setting or registry key I
>can lock down?
>>appreciate your help or ideas...
>>
>>
>>Larry
>>
>>
>>.
>>
>.
>
- Next message: Chris: "811493: Security Update (Windows XP)"
- Previous message: Matt DuBois [MSFT]: "Re: i cant find or open in c:\documents and settings\all users\documents"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
