Penetration Testing mailing list archives

Re: Active Directory user goes corrupt


From: petersetlak () me com
Date: Tue, 17 Aug 2010 15:52:05 -0400

Peter,

A single corrupt profile does not necessarily indicate a corrupt Active Directory. Some pointers - O'reilly has a book 
called the Active Directory Cookbook - it's good. In the meantime, his profile can become corrupt if he has rights to 
change things, settings, download and install, etc. Be sure his user only has rights to do what he needs to do - 
nothing more. You may also want to investigate making his user profile "mandatory" as well as try to pull as many 
settings and control of his environment back in to AD policies giving you more centralized control over users' settings.

As I don't know any details of your environment, the above are just suggestions...

-

Peter J. Setlak
petersetlak () me com

Sent from my iPad

On Aug 17, 2010, at 6:10 AM, Peter Odigie <peterodigie () gmail com> wrote:

Hi All!

I am new to active directory and I am presently managing one in a firm. A
staff comes to me and says his desktop contents are no longer there and wit
his login he cannot open packages on the his system.  Initially, I thought
it was his computer but after I logged in with my own user and he tried
logging into the domain on other computers he had the same problem. It seems
his user profile on the server (Windows Server 2003) has gone corrupt. 

How did that happen? And what am I to do? These are the questions on my
head.  In the main time I have created another user for him and I am going
through the pain of transferring giving him privileges to what he should
have access to.  Any help?

Also, I will like a recommendation of where I can get some free books on
Active directory management.

Thanks!

Peter


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: