Security Basics mailing list archives

Re: Alert when a new PC joins the domain


From: Sorin DANULESCU <sorin_danulescu () yahoo com>
Date: Mon, 01 Aug 2011 22:28:15 +0200


In a Windows domain, even a user that is not an admin, can join a computer to a domain.

The maximum number of computers than can be added by a user is 10 .

Their principle is that if you are a good Active Directory admin, even if a user joins a pc into domain, he cannot do anything dangerous because you have a good security policy and group policy.

As a plus, Microsaft is saying that once the computer is in domain... it is all yours. So you got control over it.

More details are here:
http://support.microsoft.com/kb/243327/en-us




On 08/01/2011 10:15 PM, Kimalat, Kipngetich wrote:
Well a user that tries to join a computer to  a domain would need to be either an admin, or apart of the administrators 
group in order to provide login details to join. And you can always log this in the event viewer, under the security 
log. This information of course can be collected from remote machines and forwarded to the one of your choosing. Alerts 
can be generated per email, all of this assumes of course that you are using Win2k3 or above, servers and xp and up 
clients.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: