Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Valdis . Kletnieks
On Sun, 02 Dec 2007 20:04:42 EST, Dude VanWinkle said: Anyone who was a security expert 30 yrs ago should be ridiculed. Their job description was I inspect all 5 1/4 disks that get mailed to us and should be a reason NOT to hire them :-P Anybody who doesn't know the history of security well

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread happy nino
] [mailto:[EMAIL PROTECTED] On Behalf Of happy ninoSent: Sunday, December 02, 2007 3:42 AMTo: [EMAIL PROTECTED]; [EMAIL PROTECTED]: [Full-disclosure] need help in managing administrators Hi All,i've a problem in my organization that we have several domain admins, we are in the process of removing

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread T Biehn
All that time and you still fail it at the internet? Sheesh. :) On Dec 5, 2007 5:44 PM, [EMAIL PROTECTED] wrote: On Sun, 02 Dec 2007 20:04:42 EST, Dude VanWinkle said: Anyone who was a security expert 30 yrs ago should be ridiculed. Their job description was I inspect all 5 1/4 disks

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Dude VanWinkle
On Dec 5, 2007 5:44 PM, [EMAIL PROTECTED] wrote: On Sun, 02 Dec 2007 20:04:42 EST, Dude VanWinkle said: Anyone who was a security expert 30 yrs ago should be ridiculed. Their job description was I inspect all 5 1/4 disks that get mailed to us and should be a reason NOT to hire them :-P

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Valdis . Kletnieks
On Wed, 05 Dec 2007 22:45:39 EST, Dude VanWinkle said: You are right, thanks for all the careful planning and well thought out infrastructure. I mean, who could have thought that the ability to reach into the homes of every tom dick and harry as well as every company on the planet would be

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Dude VanWinkle
On Dec 5, 2007 11:10 PM, [EMAIL PROTECTED] wrote: On Wed, 05 Dec 2007 22:45:39 EST, Dude VanWinkle said: You are right, thanks for all the careful planning and well thought out infrastructure. I mean, who could have thought that the ability to reach into the homes of every tom dick and

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Dude VanWinkle
On Dec 6, 2007 1:12 AM, [EMAIL PROTECTED] wrote: On Wed, 05 Dec 2007 23:57:19 EST, Dude VanWinkle said: try this hey boss, you will cause regulation, expose national secrets to commies, Umm.. hate to break it to you, but the design was for an *open* research network. If you said you'd be

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Nick FitzGerald
[EMAIL PROTECTED] wrote: snippety, snip Or you could go the EEPROM/CDROM route like most game consoles did. That's easier on the practicality side, but still isn't as flexible as a general-purpose PC. Which, of course, raises the question _today_, do _most_ computer users for _all_ their

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Valdis . Kletnieks
On Thu, 06 Dec 2007 19:36:30 +1300, Nick FitzGerald said: likelihood of those problems being permanently addressed, why were these issues not addressed at some point when the cost/performance points started to be more favourable? Because when the price/performance shifted to make lots of

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread T Biehn
I guess there's only one real alternative to this terrible circle of doom then: stop feeding in to the man's machine and become a blackhat and stop disclosing. *waits for Valdis to hand in his hat authorization to use FD. On Dec 6, 2007 2:12 AM, [EMAIL PROTECTED] wrote: On Thu, 06 Dec 2007

Re: [Full-disclosure] need help in managing administrators

2007-12-03 Thread Dude VanWinkle
On Dec 2, 2007 8:46 PM, T Biehn [EMAIL PROTECTED] wrote: Wonderous suggestion Dude. Apparently someone can't spot obvious sarcasm. I do have a deficiency in that area.. or are you being sarcastic again? ___ Full-Disclosure - We believe in it.

[Full-disclosure] need help in managing administrators

2007-12-02 Thread happy nino
Hi All,i've a problem in my organization that we have several domain admins, we are in the process of removing most of them but i need to have a person only authorized to installnew software to users' computers but without having access to other parts of the users machines, is this possible

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread T Biehn
In short, this depends on the permissions needed / how the installer determines if the user has them. The easiest thing to do is to give local administrator access (I'm assuming Windows platform because it sounds like it), if this is not permissible to you (as local admin access can easily be

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread James Matthews
Why are you removing the admins? based on what you wrote the computer network will probably turn into a massive mess with all these programs installed and users as admins.. On Dec 2, 2007 8:22 PM, [EMAIL PROTECTED] wrote: On Sun, 02 Dec 2007 09:42:26 GMT, happy nino said: Hi All,i've a

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread Valdis . Kletnieks
On Sun, 02 Dec 2007 09:42:26 GMT, happy nino said: Hi All,i've a problem in my organization that we have several domain admins, we are in the process of removing most of them but i need to have a person only authorized to installnew software to users' computers but without having access to

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread Valdis . Kletnieks
On Sun, 02 Dec 2007 20:34:01 +0100, James Matthews said: Why are you removing the admins? based on what you wrote the computer network will probably turn into a massive mess with all these programs installed and users as admins.. Actually, my first guess is that Happy Nino is trying to *clean

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread T Biehn
Clearly stated, he was cleaning up DOMAIN Administrators, which can, you know, Administer all the computers on the domain. *Obviously* I guess we'll all just denounce our friend here for even thinking he could ask a question as STUPID and RIDICULOUS as this one, instead of actually knowing or

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread T Biehn
Forgot to address one part of the question in my response: Q: new software to users' computers but without having access to other parts of the users machines, is this possible ? A: Yes, this is easy, use EFS set security perms so that the installer can't access the files. Remember to generate

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread Valdis . Kletnieks
On Sun, 02 Dec 2007 15:32:22 EST, T Biehn said: Clearly stated, he was cleaning up DOMAIN Administrators, which can, you know, Administer all the computers on the domain. What, you don't think that some people are unfortunate enough to be newcomers to the field, and their first assignment is to

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread Dude VanWinkle
On Dec 2, 2007 4:04 PM, [EMAIL PROTECTED] wrote: On Sun, 02 Dec 2007 15:32:22 EST, T Biehn said: Clearly stated, he was cleaning up DOMAIN Administrators, which can, you know, Administer all the computers on the domain. What, you don't think that some people are unfortunate enough to be

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread T Biehn
Wonderous suggestion Dude. Apparently someone can't spot obvious sarcasm. On Dec 2, 2007 8:04 PM, Dude VanWinkle [EMAIL PROTECTED] wrote: On Dec 2, 2007 4:04 PM, [EMAIL PROTECTED] wrote: On Sun, 02 Dec 2007 15:32:22 EST, T Biehn said: Clearly stated, he was cleaning up DOMAIN