Administrator privileges

K

Kelly

I've got a user who apparently decided to change
permissions so that domain admins can't get to the c$ over
the network.

He is an administrator of his own machine (not my choice,
but some programs wouldn't run without it), so I'm
guessing it's something he did. However, I didn't think
that local admins could take domain admins out of security
permissions, or block that administrative share.

Any ideas?
 
S

Steven L Umbach

Yes they can. You could create an OU for his computer and move it into the
OU, create a GPO for the OU and configure restricted groups so that the
domain admins group is in the administrators group. Run secedit
/refreshpolicy machine_policy /enforce on the dc. Reboot his computer, or
wait a couple hours and you should be back in the administrators group on
that machine. --- Steve

http://support.microsoft.com/?kbid=279301
http://www.jsiinc.com/SUBK/tip5300/rh5319.htm
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top