Security Basics mailing list archives
Re: GPO Application
From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Thu, 2 Feb 2006 19:47:31 +0100
On 2006-02-01 Lantana PC wrote:
Today, I tried to remove the properties sheet from Local Area Connections through the user side administrative templates. It only works on users who are not local administrators and who aren't part of the Domain Administrators group.
The Domain Administrators group is by default mapped to the local administrators group when a computer is joined to the domain. And a local administrator can do anything he wants on the local computer anyway, so don't bother. You can't lock down a local administrator other than by not making him a local administrator. Regards Ansgar Wiechers -- "All vulnerabilities deserve a public fear period prior to patches becoming available." --Jason Coombs on Bugtraq --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- GPO Application Lantana PC (Feb 02)
- Re: GPO Application Ansgar -59cobalt- Wiechers (Feb 03)
- <Possible follow-ups>
- RE: GPO Application Ramsdell, Scott (Feb 05)