Re: local users and groups

From: administrator (administrator_at_discussions.microsoft.com)
Date: 07/08/04


Date: Thu, 8 Jul 2004 00:41:01 -0700

Thanks for the responce

The copying of the local account is possible as is the use of a boot disk

Brandon, you mentioned an Accounts Operator group on the local machine? I don't see this group?

Thanks

"Torgeir Bakken (MVP)" wrote:

> administrator wrote:
>
> > we had a user who was an admin of the local machine
> > we then made him a power user and reset the admin password
> > he has now made himself an admin again and removed dom admins from the admin group
> > how was he able to do only being a power user?
> > is it possible he has some sort of hidden account? how and where would this be?
> Hi
>
> It is very easy to reset the local Administrator password
> with one of the methods mentioned here (using a bootable
> CD or diskette):
>
> http://securityadmin.info/noframes/faqget.asp#password
>
> http://www.petri.co.il/forgot_administrator_password.htm
>
>
> To avoid this in the future, set the boot order in the BIOS to boot
> on the hard disk first, and you will also need to password protect
> the BIOS (to stop the user from changing the boot order back).
>
> If possible, you should also lock the computer chassis so stop the
> user from temporary move the hard disk over to another computer
> and reset the password there.
>
> Locking the computer chassis will also stop the user from resetting
> the BIOS with dip switches (if this is supported on the computer)
> or removing the battery so the BIOS is reset (this will at least
> work on some computers).
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/community/scriptcenter/default.mspx
>



Relevant Pages

  • Re: Dual boot main hard disk died
    ... There you can change and add yourself to the Admin Group ... > replacement disk as the main one, ... >>Try using the Recovery Console and do a boot repair. ... >>in Fix Boot Fix Mbr and Bootcfg. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Installation: doesnt see setup files on hard drive?
    ... > disk the BIOS is set to boot from must have an appropriate Master Boot ... I was worried about those points you made above so I removed all drives except the one I want to instll ...
    (microsoft.public.win2000.general)
  • Re: Boot Problem
    ... Was either disk set up as a Microsoft dynamic disk? ... Do not change the boot sector signature. ... I ensure all OK by swapping over drives. ... installing XP as it insisted there was no drive to install itself on! ...
    (microsoft.public.windowsxp.hardware)
  • Re: [SLE] Problems with initrd after mkinitrd
    ... A disk can have three real heads and report a dozen or a hundred! ... > natural metric for partitioning drives that use LBA. ... > - One, less frequent, is the failure of some of the cloned drives to boot ...
    (SuSE)
  • Re: Three Linux Operating Systems in One Computer (Is it possible?)
    ... Hard Disk 1 19.42GiB IDE ... The GRUB boot loader is installed on the first hard disk. ... I am planning to combine /dev/hda6 with /devhda1 using the Gnome Partition ...
    (Ubuntu)