Solved

overriding no access

Posted on 2002-04-19
2
144 Views
Last Modified: 2010-04-13
can I, as a domain admin, view the contents of a PC, when a user (who was a local administrator) has taken the domain admin rights off a pc?
0
Comment
Question by:jg733
2 Comments
 
LVL 32

Accepted Solution

by:
jhance earned 100 total points
ID: 6954645
First, I'd question why a user who would do this is permitted the continued privilege of having local administrator rights.  That sounds like abuse of privilege to me...

Anyway, as a domain member computer, domain admins are setup by the domain join process as local admin.  If, however, the domain admins are removed from the local admins group on the workstation, you can no longer access this computer as a privileged user.

You can fix this, however but I think the only way is to go to the workstation and fix it as a local admin OR fixup a LOGON script that will re-add your domain admin group to the local admins group every time the machine is logged on.  (Actually, this is a good practice anyway and you should look into implementing it on all workstations.)
0
 
LVL 1

Author Comment

by:jg733
ID: 6954836
Fix in a logon script....I like it!

Its so simple it's brilliant.
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
An analysis of the phishing scam that has been affecting Google users, along with steps to take for protection, as well as what to do if you receive one of the emails.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

26 Experts available now in Live!

Get 1:1 Help Now