OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: NT and 2000 account policies administrations

From: Sergey V. Gordeychik (gordeyinfosec.ru)
Date: Wed May 12 2004 - 01:14:09 CDT

>Question 1
>Under MSW NT and 2000 is there a
>possibility to restrict certain actions
>that a user having administrator rights
>might be able to do on the system security configuration.

Generally - NO. A administrator is a administrator is a administrator.
You can control it in Active Directory environment with help of
delegation of control.

>Question 2
>Under MSW NT and 2000 can the audit function provide details of any
>changes made to the account policies/security
>configuration by each of the...

You can use Directory access events to control Group Policy
modification.
http://support.microsoft.com/default.aspx?kbid=814595

---------------------------------------------------------------------------
---------------------------------------------------------------------------