BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
RE: [Full-disclosure] Flaw in Microsoft Domain Account CachingAllowsLocal Workstation Admins to Temporarily EscalatePrivilegesandLogin as Cached Domain Admin Accounts (2010-M$-002) Dec 13 2010 06:15PM
David Gillett (gillettdavid fhda edu)
> If I take the domain admin out of my local administrators, they can't do
anything. Done.

Back when I did AD/domain support, all domain user accounts got a profile
that included a trivial script to re-add Domain Admins to the Local Admins
group. So this kind of local removal shenanigans lasted...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus