OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Laura A. Robinson (larobinsbellatlantic.net)
Date: Mon Dec 03 2001 - 12:13:31 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    You *can* have full control of your accounts database regardless of what you
    do with the Guest account and without having to access via local system.
    Everything that you want to do can be easily done in AD. Is this a situation
    where you are not a domain admin?

    Laura
    ----- Original Message -----
    From: "Robert Rota" <robert.a.rotasaic.com>
    To: <focus-mssecurityfocus.com>
    Sent: Friday, November 30, 2001 10:49 AM
    Subject: AD Access

    >
    >
    > Thanks for your response. When accessing the SAM
    > through LocalSystem I have complete control over it. I
    > can delete the Administrator account and the Guest
    > account and any Built-in Groups and design the
    > structure any way I want (e.g., add Security
    > Adminstrator account and deny logging and account
    > administration access to Administrator). When this is
    > taken over by AD I just need the same access. I know
    > disabling the account is fine but I want full control of
    > my accounts database.
    >
    > Thanks,
    >
    > Rob