Focus on Microsoft
RE: NT and 2000 account policies administrations May 12 2004 06:14AM
Sergey V. Gordeychik (gordey infosec ru)
>Question 1
>Under MSW NT and 2000 is there a
>possibility to restrict certain actions
>that a user having administrator rights
>might be able to do on the system security configuration.

Generally - NO. A administrator is a administrator is a administrator.
You can control it in Active Directory environment with help of
delegation of control.

>Question 2
>Under MSW NT and 2000 can the audit function provide details of any
>changes made to the account policies/security
>configuration by each of the...

You can use Directory access events to control Group Policy
modification.
http://support.microsoft.com/default.aspx?kbid=814595

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus