Administrator privileges

  • Thread starter Thread starter Kelly
  • Start date Start date
K

Kelly

I've got a user who apparently decided to change
permissions so that domain admins can't get to the c$ over
the network.

He is an administrator of his own machine (not my choice,
but some programs wouldn't run without it), so I'm
guessing it's something he did. However, I didn't think
that local admins could take domain admins out of security
permissions, or block that administrative share.

Any ideas?
 
Yes they can. You could create an OU for his computer and move it into the
OU, create a GPO for the OU and configure restricted groups so that the
domain admins group is in the administrators group. Run secedit
/refreshpolicy machine_policy /enforce on the dc. Reboot his computer, or
wait a couple hours and you should be back in the administrators group on
that machine. --- Steve

http://support.microsoft.com/?kbid=279301
http://www.jsiinc.com/SUBK/tip5300/rh5319.htm
 
Back
Top