Re: how do I find out what replaced my system files?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Celler Dweller (BillG_at_microsoft.com)
Date: 06/14/04 

Date: Mon, 14 Jun 2004 10:05:02 -0400

Lanwench [MVP - Exchange] wrote:
> Do users have local admin rights? It's hard to say what did what, if users
> are allowed to install software, etc....
>
> Celler Dweller wrote:
>
>>Hi Everyone,
>>I need someone to throw a clue in my direction. I have some users that
>>are receiving the Windows File Protection message about replaced files
>>and it was prompting them for the win2k CD to restore the originals. I
>>am being asked to determine what app replaced them and if this is a
>>security issue. They are looking for documentation on this. Does
>>anyone know of any?
>
>
>
Hi and thanks for the reply,
I don't believe my user has admin rights. Most do not have admin
privileges, but a very few do. Is there any kind of log file besides the
Event viewer for this?

Thanks

Relevant Pages

  • Re: Visual Studio 2005 Web Site <-> Visual Source Safe Problems...
    ... Local Admin rights are very bad! ... RISK of being infected by trojans and SpyWare. ... existing website" from source safe. ...
    (microsoft.public.vsnet.general)
  • Re: getting me ducks in a row - concepts
    ... Don't create local login accounts for users, ... > the user has local admin rights and you will want to tweak this using RegMon ... keys on the server? ...
    (microsoft.public.windows.server.sbs)
  • Re: Visual Studio 2005 Web Site <-> Visual Source Safe Problems...
    ... you log on locally with Admin rights because their browser is part of the o/s and has an ActiveX instantiation layer. ... Browsing to ANY internet site while logged in with local Admin rights puts you machine at HIGH RISK of being infected by trojans and SpyWare. ... Still, when switching between websites, it gets to be a bit of a pain to have to create a new website and then add from source safe every time we switch. ... I can't test this fully, because I only have one client machine left with IIS on it, we changed our main .NET 2.0 dev team over to using Cassini which has solved the complications of trying to manage local IIS servers and their security across multiple machines, but the built-in server does have some limitations - if you want to use ISAPI etc. ...
    (microsoft.public.vsnet.general)
  • Re: Does anyone truly use Restricted User Accounts?
    ... > workstations and network. ... > user to have local Admin rights. ... > Has anyone truly and successfully implelmented Restricted User Accounts on ...
    (microsoft.public.windows.server.sbs)
  • Re: ActiveSync wont install . . Ver 3.7.1
    ... > My Dell Axim stopped syncing with my home PC (Windows XP> Home Edition). ... > your desktop computer and run Setup again." ... The resolution is to be> sure you have admin rights to install software. ...
    (microsoft.public.pocketpc.activesync)