Security Basics mailing list archives

RE: Windows XP local Privileges


From: "Daily Truth" <email () dailytruth co uk>
Date: Mon, 13 Dec 2004 19:25:13 -0000

Either, adjust group policy on the Domain Controller or Assuming you have
admin privileges, log in as a local or domain admin on the machine, and you
will now have the admin privileges required to set up the proxy and internet
connection. Though as far as I can remember a power user can set up the
proxy settings in internet properties...though not the gateway address :)

 If you want to actually have the machine dictate it's own policies. Use
local security policies in Control Panel/Admin Tools.....
And set up a local account as follows to do the work in... 

Just go to user accounts (Control Panel>User Accounts) on the workstation.
Create an account under the individuals name but instead of typing
"yourdomain" in the DOMAIN field type the name of the local machine
eg/SALESPC1155
Make the account an administrator click OK and then say yes to log out when
the PC requests to. Now at the ctrl alt delete prompt, below the password
box click on the options tab, and a list with two or more options should
drop down. One being your domain name(s) and one being the name of the local
machine "SALESPC1155" for this example. Select SALESPC1155 and enter the
users credentials that you setup when you created the account. Same as
domain ones unless for an administrator. The machine will load up with that
naff xp desktop and XP tour icon etc as it is a new un-customised account.
Customise as required...turning unnecessary services off etc.....and
activate win xp.
Then setup Local Security Policy as described above for the individual user.
Remove the admin privileges from their account by making them a power user
or similar and then log off.Job Done!


Andrew Craig

A+, N+, MCSE, CCNA



Current thread: