Solved

overriding no access

Posted on 2002-04-19
2
146 Views
Last Modified: 2010-04-13
can I, as a domain admin, view the contents of a PC, when a user (who was a local administrator) has taken the domain admin rights off a pc?
0
Comment
Question by:jg733
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 32

Accepted Solution

by:
jhance earned 100 total points
ID: 6954645
First, I'd question why a user who would do this is permitted the continued privilege of having local administrator rights.  That sounds like abuse of privilege to me...

Anyway, as a domain member computer, domain admins are setup by the domain join process as local admin.  If, however, the domain admins are removed from the local admins group on the workstation, you can no longer access this computer as a privileged user.

You can fix this, however but I think the only way is to go to the workstation and fix it as a local admin OR fixup a LOGON script that will re-add your domain admin group to the local admins group every time the machine is logged on.  (Actually, this is a good practice anyway and you should look into implementing it on all workstations.)
0
 
LVL 1

Author Comment

by:jg733
ID: 6954836
Fix in a logon script....I like it!

Its so simple it's brilliant.
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question