Local Security Settings (Admin Users)

[AlohaMahalo]

How do I prevent users with Administrator privileges [other than the
Administrator (root) account of course] to access / edit the Local Security
Policy settings.

Thank you in advance for any feedback.

 

[Jim]

How do I prevent users with Administrator privileges [other than the
Administrator (root) account of course] to access / edit the Local
Security
Policy settings.

Thank you in advance for any feedback.

All members of the administrators group have the same privileges.
You cannot keep a member of this group from doing whatever they wish
whenever they wish.
You can deny access do the program which does the magic with the LSP, but
all that would do is slow a determined user down.
Jim

 

[AlohaMahalo]

Hi Jim,

Sounds good to me. Is there a step by step procedure that describes how you
can do that? Any help appreciated. Thank you so much.

How do I prevent users with Administrator privileges [other than the
Administrator (root) account of course] to access / edit the Local
Security
Policy settings.

Thank you in advance for any feedback.

All members of the administrators group have the same privileges.
You cannot keep a member of this group from doing whatever they wish
whenever they wish.
You can deny access do the program which does the magic with the LSP, but
all that would do is slow a determined user down.
Jim

 

[Steve Riley [MSFT]]

You've asked your question twice here.

Anyone in the group named "Administrators" can do whatever they want on the
computer. You can't do anything to prevent this.

--
Steve Riley
(e-mail address removed)
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com

Hi Jim,

Sounds good to me. Is there a step by step procedure that describes how
you
can do that? Any help appreciated. Thank you so much.

How do I prevent users with Administrator privileges [other than the
Administrator (root) account of course] to access / edit the Local
Security
Policy settings.

Thank you in advance for any feedback.

All members of the administrators group have the same privileges.
You cannot keep a member of this group from doing whatever they wish
whenever they wish.
You can deny access do the program which does the magic with the LSP, but
all that would do is slow a determined user down.
Jim