Re: local administrator
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 10/17/03
- Next message: Roger Abell: "Re: No one can Administrate?"
- Previous message: Roger Abell: "Re: What does the following "Failure Audit" mean?"
- In reply to: Ahmed Nour: "local administrator"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 16 Oct 2003 22:08:21 -0700
inlined . . .
"Ahmed Nour" <anonymous@discussions.microsoft.com> wrote in message
news:2ca1701c393eb$923ec250$a601280a@phx.gbl...
> I have Win 2k Advanced Server Domain ,all of my users are
> super user
I take that to mean they are Power Users group members (?)
> but some of them needs to install some programs
> which need an administrative privillege so i create a
> local administrator account for them to setup their appz .
> but I found that any local admin could browse all data of
> other domain clients(the same as domain admin)
by "other domain clients" do you mean
- on other machines in the domain
if so, use a unique local admin account name on each machine,
such as on MachineX have account MachineXadm
- storage on same machine that belongs to different
domain user accounts that use that machine
if so, you can modify NTFS permissions so that the local
admin has to take explicit actions to change them in order
to get access to those storage area.
>
> help will be appreciated
> Best regards
-- Roger Abell Microsoft MVP (Windows Server System: Security) MCSE (W2k3,W2k,Nt4) MCDBA
- Next message: Roger Abell: "Re: No one can Administrate?"
- Previous message: Roger Abell: "Re: What does the following "Failure Audit" mean?"
- In reply to: Ahmed Nour: "local administrator"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
