Re: Deny administrator local login

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



In news:%23PXXLcQGGHA.140@xxxxxxxxxxxxxxxxxxxx,
TZanolo <zanolo2@xxxxxxxxxxx> typed:
> we use a windows xp with a imaggesseter conected trought a scsi card.
> We need admin privileges to magane it. But we are using the domain
> administrator account... So only 3 people here knows its password.
> But now will work here a lot of people and they must operate the
> imaggesseter remotally. I don`t want these new people know the master
> password from my domain. So I will create a simple account and give
> to it local administrator privileges only in that machine. And
> everyone will know only this password.

Sounds good.

> I just need to "deny logon
> locally" to administrator account just to force my olders users don`t
> use its password anymore in that machine.

Sounds bad. Just change the password so that unauthorized users can't use
the domain admin credentials.


>
>
>
> THANKS!
>
>
> "Miha Pihler [MVP]" <mihap-news@xxxxxxxxxxx> escreveu na mensagem
> news:O70AOcIGGHA.1192@xxxxxxxxxxxxxxxxxxxxxxx
>> Yes it is possible. Edit policy and put Administrator account in
>> "Deny logon locally".
>>
>> Deny logon locally
>> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/537.mspx
>>
>> Note: be very careful what you do, because you _can_ lock yourself
>> out. Also note that administrator can bypass this policy if he/she really
>> want. My question: why would you want to implement such policy? What is
>> your reason behind this?
>>
>> --
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "TZanolo" <zanolo2@xxxxxxxxxxx> wrote in message
>> news:u6PUUUIGGHA.1552@xxxxxxxxxxxxxxxxxxxxxxx
>>> I want that the administrator can't login locally on a windows xp
>>> professional workstation. My server is win2k with domain. Is there
>>> a way?


.

Relevant Pages

  • Re: IBM says AMD dead in 5yrs ... -- Microsoft Monopoly vs. IBM monopoly
    ... those virii are not relying on anything inherent in Windows. ... >>administrator failing to put a password on the administrator account for ... >>Outlook Express, a Web browser other than Internet Explorer, and using a ...
    (comp.os.vms)
  • Re: Administrator account logon
    ... MS-MVP Windows XP/ Windows Smart Display ... >>the Administrator account on the new Windows XP logon ... >>for Enable Administrator Account ... MS-MVP Windows XP/ Windows Smart Display ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Password Protected Screen Saver and Administrative Password
    ... the console is routinely locked by administrator ... is to give them a local administrator account, ... There are versions of winexit.scr available for windows 2000 and 2003 ... > release a server password protected screen-saver ...
    (Focus-Microsoft)
  • [Full-Disclosure] Re: Vulnerability in IBM Windows XP: default hidden Administrator account allows l
    ... Windows XP home edition hides the administrator account and disables access ... Subject: Vulnerability in IBM Windows XP: default hidden Administrator ... > In previous versions of Windows, the install would allow you to ...
    (Full-Disclosure)
  • Re: Administrator Privileges
    ... HOW TO Take Ownership of a File or Folder in Windows XP: ... > administrative profile for Administrator. ... >>>> In XP Pro edition, run GPEDIT.MSC, and look for a policy setting. ... >>>>> administrator account became a partial administrator. ...
    (microsoft.public.windowsxp.help_and_support)