Re: Restricting changes on windows register keys

From: da_test (davexnet02NO_at_SPAMyahoo.com)
Date: 03/04/05 

Date: Thu, 03 Mar 2005 17:02:09 -0800

On Thu, 3 Mar 2005 13:51:59 -0600, "Solomon" <inteca@NOracsa.co.cr>
wrote:

>Of course not.
>All are domain users (not local: Administrators & Power Users by example)
>and they are member of Domain Users plus other groups (with scope Global and
>type security) dependent of theirs departments (not Administrators, Domain
>Admins, ... Admins)
>
>THKS!
You are trying to restrict users access to the registry, but some how
they are accessing it? Have you a theory as to how they are
accomplshing it?

Are they logging on as local administrators is SAFEMODE
for example?
DAve

Relevant Pages

  • RE: Automating Local Computer Admin Rights
    ... groups the first box that pops up add administrators. ... add domain admins because they are there by deafult and add adminstrators. ... gpo settings will not tricly down or inherit the settings just from a child ... members of the administrators group on the local machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Administrator privs on Client
    ... It is fairly normal to restrict admin access to SQL Server to only ... Domain Admins is added to a machine's Administrators ... I have an SQL server on my domain, I have to login as the local sql ...
    (microsoft.public.windows.group_policy)
  • Re: Weird security problem in my WIn2K domain
    ... Keep in mind that enterprise admins group has no administrative powers on ... Another thing to try is to create a new account ... add that account to the local administrators ... enable auditing of account logon events in Domain Controller Security Policy ...
    (microsoft.public.windows.server.security)
  • Re: Super Admin Account
    ... "Super Admin" account? ... Enterprise Admins ... This group is automatically added to the Administrators group in every ... This group has complete control over all domain controllers and all ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Logon To Domain Controller
    ... That dose this administrators out to PCs have to do? ... PC Admins or what ever you want. ... >>> Server machine itself. ... >>logon locally on DCs. ...
    (microsoft.public.win2000.active_directory)