Re: local users and groups
From: administrator (administrator_at_discussions.microsoft.com)
Date: 07/08/04
- Next message: Merlinox: "Win 2000 - TcpIp problem"
- Previous message: Luca: "Hide File or Folder"
- In reply to: Torgeir Bakken \(MVP\): "Re: local users and groups"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 8 Jul 2004 00:41:01 -0700
Thanks for the responce
The copying of the local account is possible as is the use of a boot disk
Brandon, you mentioned an Accounts Operator group on the local machine? I don't see this group?
Thanks
"Torgeir Bakken (MVP)" wrote:
> administrator wrote:
>
> > we had a user who was an admin of the local machine
> > we then made him a power user and reset the admin password
> > he has now made himself an admin again and removed dom admins from the admin group
> > how was he able to do only being a power user?
> > is it possible he has some sort of hidden account? how and where would this be?
> Hi
>
> It is very easy to reset the local Administrator password
> with one of the methods mentioned here (using a bootable
> CD or diskette):
>
> http://securityadmin.info/noframes/faqget.asp#password
>
> http://www.petri.co.il/forgot_administrator_password.htm
>
>
> To avoid this in the future, set the boot order in the BIOS to boot
> on the hard disk first, and you will also need to password protect
> the BIOS (to stop the user from changing the boot order back).
>
> If possible, you should also lock the computer chassis so stop the
> user from temporary move the hard disk over to another computer
> and reset the password there.
>
> Locking the computer chassis will also stop the user from resetting
> the BIOS with dip switches (if this is supported on the computer)
> or removing the battery so the BIOS is reset (this will at least
> work on some computers).
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/community/scriptcenter/default.mspx
>
- Next message: Merlinox: "Win 2000 - TcpIp problem"
- Previous message: Luca: "Hide File or Folder"
- In reply to: Torgeir Bakken \(MVP\): "Re: local users and groups"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|