Re: Windows XP user creation vulnerability

Tech-Archive recommends: Fix windows errors by optimizing your registry

No because you are talking about finding a technological solution to a human
behavior problem. The best suggestion I can offer is to encourage the site
to implement an acceptable computer use policy and clearly define what types
of disciplinary actions can be taken if an employee breaks said policy.
Have the employee acknowledge that policy at the start of their employment.

"Bijan Kianifard" <BijanKianifard@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:66C4A70A-0220-4F45-B5E9-08B14DB72AF0@xxxxxxxxxxxxxxxx
> Actually, this is the best way but I mean is there any facility provided
> by
> microsoft to correct this problem?
>
> "steve.a" wrote:
>
>> I dont have this problem, but my users have a strict usage policy in
>> place,
>> its easy to stop simply disable the cd rom from bios and pw protect bios,
>> or
>> buy device lock which allows you to manage per user who gets access to cd
>> dvd
>> and usb drives etc
>>
>>
>> --
>> there are no problems just challenges
>>
>>
>> "Bijan Kianifard" wrote:
>>
>> > Hi All,
>> >
>> > In the following article you can find a simple and effective way to
>> > create a
>> > user account with desired right in windows XP without having
>> > administrator
>> > right.
>> >
>> > http://pubs.logicalexpressions.com/Pub0009/LPMArticle.asp?ID=305
>> >
>> > I faced this issue in a large installation with more than 200
>> > workstations
>> > all winXP. Is there any way to stop the users breaching the security
>> > using
>> > this approach?
>> >
>> > Thanks and regards
>> > Bijan
>> >


.

Relevant Pages

  • Re: email monitoring
    ... Defamantory statements or Libel (allowing staff to send emails ... The company does have a strict policy for the use of email ... If a company has told it's employees that email use is monitored then it is unlikely that any employee could take the employer to court for 'monitoring' email. ...
    (uk.legal)
  • Re: Corporate policies on web mail services like Hotmail?
    ... >> Personnel in a company should be accessing mail from corporate servers ... >> This is not just advice, it should be policy. ... access to staff and/or facilities that could be used (auto, photocopier, ... Employee doesn't get paid as much as similar in another company but has ...
    (comp.security.misc)
  • Re: Broken 360...Best Buy advice.
    ... BB have executed the warranty policy, he's still got a 50/50 chance the BB ... employee he talks to lies about what the policy says, ... An iPod dock is $39.99 MSRP, but Best Buy sells it for $49.99. ...
    (alt.games.video.xbox)
  • Re: Too many redshirts?
    ... including the fact that in most cases HP's customers *do* buy their ... the ANP for the company's products? ... now appear to be seeing a company with a default policy of issuing ... employee should fill it. ...
    (alt.usage.english)
  • Re: Blocking Yahoo Messenger With Firewall??
    ... the line of flag poles along the walkway to the Computer Center are there so they can impale the severed heads of "creative" users who violate policy. ... the ssh datastream is encrypted, and no one will be able to see what they are doing. ... So he was in violation of company policy by accessing his own computer. ... The employee would have to not only load software that was not authorized on their device and would have "had" to escalate perms on the local machine to install or run the software to make ssh connection. ...
    (alt.computer.security)