Re: Security Profile Settings

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 10/30/03 

Date: Wed, 29 Oct 2003 18:28:44 -0700

You cannot realistically restrict an administrator 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Alena" <anonymous@discussions.microsoft.com> wrote in message
news:1F0C6F27-D142-4B1D-83A2-D91C4B17CD59@microsoft.com...
> Where can I go to grant or restrict access to specific groups or users? I
want to restrict a computer administrators from changing the Administrator
account but want to allow them access to everything else.

Relevant Pages

  • Re: Terminal Service and Cmd.exe BackDoor Security
    ... You can put a roadblocks in their way with Group Policy ... print sharing to the users you want to restrict. ... work without user being local administrator which may be possible by ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Restricting internet access completely to users/groups
    ... Realistically you can not restrict an administrator account as ... know how to restrict such a user would be to use a firewall that can be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Domain Admins restriction
    ... > There is no such thing as a restricted domain administrator. ... >> few user files I want to restrict him from. ... >> I tried Domain Admin to the folders and then adding ... >> his name to these folder and restricting access, ...
    (microsoft.public.win2000.active_directory)
  • RE: Software Restriction Policy major screw up
    ... available are not available in Recovery Console Mode. ... I was attempting to restrict software on that ... > account but apparently I restricted all users including Administrator. ... > because it has been prevented by a software restriction policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Terminal Service and Cmd.exe BackDoor Security
    ... Terminal Services and that issue should be looked at closer to find a way to ... anyone with administrator powers if they know how to use administrator ... rules to restrict those binaries which is the best way if the TS is Windows ... easily navigate to 'Windows\System32' to activate the 'cmd.exe' command. ...
    (microsoft.public.windowsxp.security_admin)
Loading