RE: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it?

2006-05-18 Thread Crawford, Scott
ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it? It does not even have to be a logon script. I remember years ago some one put a trojan on one of our Pr1me's. It was a simple game, unless you ran it from a privileged account. All was

RE: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it?

2006-05-18 Thread Jeremy Saunders
Return Receipt Your RE: [ActiveDir] OT: Overriding local computer logon scripts document: - anyway to do it?

RE: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it?

2006-05-18 Thread Dave Wade
gt;Subject: Re: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it? > >Wasn't one of the infamous Dr. J stories about how they had attempted to gain access to >one of the msn servers by having a boobie trap script like that. If a person had logged >in with

Re: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it?

2006-05-17 Thread Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
Third Edition - http://www.joeware.net/win/ad3e.htm _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Crawford, Scott Sent: Tuesday, May 16, 2006 8:57 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it? &q

RE: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it?

2006-05-17 Thread joe
Edition - http://www.joeware.net/win/ad3e.htm _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Crawford, Scott Sent: Tuesday, May 16, 2006 8:57 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do

RE: [ActiveDir] OT: Overriding local computer logon scripts - anyway to do it?

2006-05-16 Thread Crawford, Scott
"what is stopping some server admins to put in some logon scripts that adds a certain account as enterprise admin (boobietrap)." The same thing that prevents them from installing a keylogger or modifying any code on the system to do their nefarious deeds when a high level account runs them - a