Solved

Enable administrator to masquerade as any registered user

Posted on 2008-06-12
2
495 Views
Last Modified: 2013-12-04
I found out that this could be done on Mac OS X Server, can I do this on a Windows Domain, and if so how than? We are running Windows 2003 SBS.

Quote: "This option can be considered somewhat controversial. When checked, it is possible for an administrator to log in as a user, using the users username but the administrators password instead of the users password. "
0
Comment
Question by:Logifire
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 5

Accepted Solution

by:
pbeirne earned 25 total points
ID: 21768939
I don't think this can be done in Windows.

I wouldn't presume to tell you how to run your shop but as a domain admin I can't think of any reason I would need to log in as you requested.   Typically when I need to test settings I would create a dummy user that is a copy of another user and log in with that.  Otherwise I do not want to know any user's password or have the ability to masquerade as a user.  Either of those can lead to accountability issues.  It's better to separate yourself.
0
 
LVL 38

Assisted Solution

by:Rich Rumble
Rich Rumble earned 25 total points
ID: 21771549
you can "runas" if you have the pass and username, but you cannot use the admin pass as a backdoor into users accounts, that would be a very bad choice, even and especially for M$. It's bad enough they make you (local)admin by default.
-rich
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question