Re: local users and groups
From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 07/07/04
- Next message: dgifford: "Lock Down Help"
- Previous message: BDedman: "RE: local users and groups"
- In reply to: administrator: "local users and groups"
- Next in thread: administrator: "Re: local users and groups"
- Reply: administrator: "Re: local users and groups"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 07 Jul 2004 18:08:53 +0200
administrator wrote:
> we had a user who was an admin of the local machine
> we then made him a power user and reset the admin password
> he has now made himself an admin again and removed dom admins from the admin group
> how was he able to do only being a power user?
> is it possible he has some sort of hidden account? how and where would this be?
Hi
It is very easy to reset the local Administrator password
with one of the methods mentioned here (using a bootable
CD or diskette):
http://securityadmin.info/noframes/faqget.asp#password
http://www.petri.co.il/forgot_administrator_password.htm
To avoid this in the future, set the boot order in the BIOS to boot
on the hard disk first, and you will also need to password protect
the BIOS (to stop the user from changing the boot order back).
If possible, you should also lock the computer chassis so stop the
user from temporary move the hard disk over to another computer
and reset the password there.
Locking the computer chassis will also stop the user from resetting
the BIOS with dip switches (if this is supported on the computer)
or removing the battery so the BIOS is reset (this will at least
work on some computers).
-- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/community/scriptcenter/default.mspx
- Next message: dgifford: "Lock Down Help"
- Previous message: BDedman: "RE: local users and groups"
- In reply to: administrator: "local users and groups"
- Next in thread: administrator: "Re: local users and groups"
- Reply: administrator: "Re: local users and groups"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
