• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 321
  • Last Modified:

Novell Admin user gets Administrator rights in W2k Pro

Hi guys,

Is it possible to prevent a novell user with Admin rights from getting admin rights to a Windows 2000 Pro workstation. He can do with Power user rights on this machine.
0
Ben Keyser
Asked:
Ben Keyser
  • 6
  • 2
  • 2
  • +1
1 Solution
 
geoffrynCommented:
Sure.  Just make sure that he is not a member of the Administrators group.  By default you do not have to be a local workstation admin to run the netware admin apps.  Unless you are using NDS for NT or Zen Works, the user would not be added to the administrator group anyway.
0
 
Ben KeyserOwner/EntrepreneurAuthor Commented:
1) Not using NDS for NT.
2) He gets added to the Administrators group the moment he logs on. Tried and tested.
0
 
geoffrynCommented:
Do you have a  2000 or NT 4.0 domain that you are also logging onto?
0
The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

 
sverreCommented:
"Not using NDS for NT"
How about ZEN-works?
Maybe a policy is creating a dynamic local user?
When the user not is logged into the machine, is there any useracount for that specific user in Usermanager?
If not, you are deffinitly using dynamic local user or having a domaincontroler.
If you have a domaincontroler, check the useracount in Usermanager for Domains (on the domaincontroler)
0
 
DSPooleCommented:
Ben,

Your network is using ZENworks for Desktops 1.x/2.0/3.0 - the network admin has configured the Windows NT packages for something called Dynamic Local Users and given it Windows NT Administrator privleages.

This allows him to log into ANY Windows NT or 2000 computer attached to the network.  Even if you go and delete the user account on the computer.

Being that he is the network admin (and you are not) - it seems that this is his right.  If he is not supposed to be doing this then take it up with his supervisor.

However, if this is his job then as a user you have no rights to stop him.

Consider yourself fortunate that YOU have Administrator rights to your desktop - if it were up to me I'd adjust the properties of the Windows NT package and you would be logging in with just enough rights to launch Word (which is what we do - users can use applications but do not have rights to modify the desktop OS in any way - including installing software or making configuration changes).
0
 
Ben KeyserOwner/EntrepreneurAuthor Commented:
DSPoole,

I will disregard your comment. As far as I am concerned, the discussion is not about the superiority of the Net Admin. I have admin rights (rightfully) to the Network AND workstation. The problem is that some of the techies with Admin rights log into my workstation and load software to experiment with, on my machine, causing all kinds of problems on my PC. Supporting clients with a PC that crashes constantly is painful.

If you have anything constructive to say, such as Sverre and Geoffryn and others, please do so. Else stay out. You have a very arrogant way of conveying your message. By the way, as I assume you are also an IT professional, I will ask you as pro to pro - please do not disgrace the other IT pro's with this attitude.

Ben Keyser.

By the way - we are not using ZEN - FYI
0
 
sverreCommented:
Just a thoght! ( i havent tested it my self!)
If you create a local useracount with no administrator rights on that particular user, does the local rights come from the domain or the local sam?
0
 
Ben KeyserOwner/EntrepreneurAuthor Commented:
Well, I dived into NWAdmin just now and made an interesting discovery. One of the guys (obviously after realising that I created him a user acount WITHOUT admin rights to the workstation) created a polizy, using ZEN for a dynaminc user with ADMIN rights.

So, to MR Dspoole, it seemed that ZEN did play a role after all, allthough we do not use ZEN as a rule, ONLY to create backdoors, it seems.

Thanks for all who helped, but the expert points will go to Sverre this time.

Ben
0
 
Ben KeyserOwner/EntrepreneurAuthor Commented:
See prevoius comment.
0
 
DSPooleCommented:
Ben,

1)  I have seen many comments and questions from users trying to bypass administrator security and protocols - my mistake for assuming you were one of them.

2)  At least I can tell when ZENworks is in use :P
0
 
Ben KeyserOwner/EntrepreneurAuthor Commented:
DSPoole

Accepted
0
 
Ben KeyserOwner/EntrepreneurAuthor Commented:
DSPoole,

May I add my personal philosophy:

Assumptions is the mother oa all f!@#-ups!!

 ;)
Ben
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 6
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now