Hi Slawek,
Care to share the exact registry setting to do this? I haven't heard of it
before and can see it being very useful.

Cheers,

Bob

-----Original Message-----
From: Miroslaw Slawek Chorazy [mailto:mchorazy (at) depaul (dot) edu [email concealed]]
Sent: 05 May 2004 22:13
To: focus-ms (at) securityfocus (dot) com [email concealed]; glenn.wolf (at) we-inc (dot) com [email concealed]
Subject: RE: Restricting the change of the local administrator account
pas sword.

this is possible if you have not implemented a change in the registry
via policies or manually which any sensible administrator would years
ago...

slawek

>>>"Wolf, Glenn" <glenn.wolf (at) we-inc (dot) com [email concealed]> 5/5/2004 12:09 >>>
By the way, a user with no Administrative privileges (but who has
physical
access to the machine) can change the local Administrator password
anyway
through a nifty little Linux-based boot disk:

http://home.eunet.no/~pnordahl/ntpasswd/

It boots up, and among other things, allows the user to reset any local
user
password (including Administrator or renamed Administrator).

Glenn

_________________________________________________________________
Check out the coupons and bargains on MSN Offers! http://youroffers.msn.com

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]