Check the Account Operators group?
-Original Message-
From: Kurt Buff [mailto:[EMAIL PROTECTED]
Sent: Monday, May 05, 2008 10:30 AM
To: NT System Admin Issues
Subject: Domain Admin monkey business
I've been on vacation for a couple of weeks, and came back to a bit of
a situation. The
Just did - they're not in there either.
On Mon, May 5, 2008 at 10:37 AM, Barsodi.John [EMAIL PROTECTED] wrote:
Check the Account Operators group?
-Original Message-
From: Kurt Buff [mailto:[EMAIL PROTECTED]
Sent: Monday, May 05, 2008 10:30 AM
To: NT System Admin Issues
]
Posted At: Monday, May 05, 2008 10:49 AM
Posted To: NTSysadmin
Conversation: Domain Admin monkey business
Subject: Re: Domain Admin monkey business
Just did - they're not in there either.
On Mon, May 5, 2008 at 10:37 AM, Barsodi.John [EMAIL PROTECTED]
wrote:
Check the Account Operators group
Found it.
Someone put the group in the Administrators group.
I'm quite unhappy, and I'm investigating.
On Mon, May 5, 2008 at 10:37 AM, Barsodi.John [EMAIL PROTECTED] wrote:
Check the Account Operators group?
-Original Message-
From: Kurt Buff [mailto:[EMAIL PROTECTED]
Sent:
Fire them all! or at least fifty lashes.
On Mon, May 5, 2008 at 12:56 PM, Kurt Buff [EMAIL PROTECTED] wrote:
Found it.
Someone put the group in the Administrators group.
I'm quite unhappy, and I'm investigating.
On Mon, May 5, 2008 at 10:37 AM, Barsodi.John [EMAIL PROTECTED]
wrote:
I suspect a contractor brought in to cover while I was gone, but I'm
parsing logs now to see if I can determine that.
Fortunately, I syslog everything I can, so should be able to track it
down fairly quickly.
On Mon, May 5, 2008 at 10:59 AM, Steve Ens [EMAIL PROTECTED] wrote:
Fire them all! or
System Admin Issues
Subject: Re: Domain Admin monkey business
I suspect a contractor brought in to cover while I was gone, but I'm
parsing logs now to see if I can determine that.
Fortunately, I syslog everything I can, so should be able to track it
down fairly quickly.
On Mon, May 5, 2008 at 10
Issues
Subject: Re: Domain Admin monkey business
I suspect a contractor brought in to cover while I was gone, but I'm
parsing logs now to see if I can determine that.
Fortunately, I syslog everything I can, so should be able to track it
down fairly quickly.
On Mon, May 5, 2008 at 10
Issues
Subject: Re: Domain Admin monkey business
I suspect a contractor brought in to cover while I was gone, but I'm
parsing logs now to see if I can determine that.
Fortunately, I syslog everything I can, so should be able to track it
down fairly quickly.
On Mon, May 5, 2008 at 10:59 AM, Steve Ens
access was given, it just says what object, who did it, and at what
time. Should be enough to figure it out, though.
-Original Message-
From: Kurt Buff [mailto:[EMAIL PROTECTED]
Sent: Monday, May 05, 2008 1:01 PM
To: NT System Admin Issues
Subject: Re: Domain Admin monkey
10 matches
Mail list logo