See http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Phillip Partipilo
Sent: Tuesday, February 14, 2006
10:45 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Local
admin priviledges
Curious, how do you d
curity.com/articles/Using-Restricted-Groups.html
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Phillip
PartipiloSent: Tuesday, February 14, 2006 10:45 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Local admin
priviledges
Curious, how do you do that via GPO? a c
True, but theoretically no users know the local
administrator password on their PCs.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Noah
EigerSent: Tuesday, February 14, 2006 1:06 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Local admin
priviledges
Also
Subject: RE: [ActiveDir] Local
admin priviledges
Curious, how do you do that via GPO?
a custom ADM?
Phillip Partipilo
Parametric Solutions Inc.
Jupiter, Florida
(561) 747-6107
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman
@mail.activedir.orgSubject: RE: [ActiveDir] Local admin
priviledges
Ahh yes, we do have all users in one global group, and that
global group is auto-added to every local administrators group on each PC
through GPO. I guess that explains that.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim
ander Kooi
*Sent:* Tuesday, February 14, 2006 9:48 AM
*To:* ActiveDir@mail.activedir.org
*Subject:* RE: [ActiveDir] Local admin priviledges
Being a local admin on a PC does not give them the ability to see
another machine's C$ share. This would occur if you added a group
(local admi
:* Tuesday, February 14, 2006 9:48 AM
*To:* ActiveDir@mail.activedir.org
*Subject:* RE: [ActiveDir] Local admin priviledges
Being a local admin on a PC does not give them the ability to see
another machine's C$ share. This would occur if you added a group
(local admins) to the administrators g
... ... ... ...
Sergio J. Olivarez -
Contractor
GD-NS
From: Rimmerman, Russ
[mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 14, 2006
8:40 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Local admin
priviledges
Well someone just realized that since all our users are
local
:48 AMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Local admin
priviledges
Being a local admin on a PC does not give them the ability
to see another machine's C$ share. This would occur if you added a group
(local admins) to the administrators group on all PCs and then added use
On Behalf Of Rimmerman, Russ
Sent: Tuesday, February 14, 2006
7:40 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Local admin
priviledges
Well someone just realized that
since all our users are local admins on their PCs that they can map to another
users C$ share and see all their d
regenerated using SYSPREP and
thus all clients have identical machine SIDs.
jorge
From: [EMAIL PROTECTED] on behalf of Rimmerman, Russ
Sent: Tue 2006-02-14 16:40
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Local admin priviledges
Well someone just
:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ
Sent: Tuesday, February 14, 2006
9:40 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Local admin
priviledges
Well someone just realized that
since all our users are local admins on their PCs that they can map to
9:40 AMTo:
ActiveDir@mail.activedir.orgSubject: [ActiveDir] Local admin
priviledges
Well someone just
realized that since all our users are local admins on their PCs that they can
map to another users C$ share and see all their data. They asked mgmt if
they knew about that, and now of cours
Well someone just
realized that since all our users are local admins on their PCs that they can
map to another users C$ share and see all their data. They asked mgmt if
they knew about that, and now of course, they're concerned about it. It's
been this way for years, but I digress.
SO, w
14 matches
Mail list logo
