Home page logo
/

basics logo Security Basics mailing list archives

Re: GPO Application
From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Thu, 2 Feb 2006 19:47:31 +0100

On 2006-02-01 Lantana PC wrote:
Today, I tried to remove the properties sheet from Local Area
Connections through the user side administrative templates. It only
works on users who are not local administrators and who aren't part of
the Domain Administrators group.

The Domain Administrators group is by default mapped to the local
administrators group when a computer is joined to the domain. And a
local administrator can do anything he wants on the local computer
anyway, so don't bother. You can't lock down a local administrator other
than by not making him a local administrator.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]