To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
You could argue that. But, if you consider the fact that most hackwares and
viruses/trojans that carry their own account/password dictionaries don't do
SID enumeration, you'd understand the significance of renaming the accounts
] On Behalf Of Rocky
HabeebSent: Thursday, July 22, 2004 1:32 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] Renaming The
Admin Account
Deji,
You
know I love you (and Tony, and Guido, and Robbie and Gil, and Roger and of
course joe, and all the other heavyweights), but, we're not confused
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido
Sent: Thursday, July 22, 2004 4:57 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
Rocky - this thread is actually quite incredible - you're wandering from
user
1) The easiest way to see would have been to test it - the answer is
they would see the accounts and granted permissions.
2)I'm not sure what you mean? What is a standard? There isn't really one
as it depends on the environment. A good rule is of course not to give
everybody full control and not
I'll answer the second question first: When assigning NTFS permissions
to resources, I select the local Administrators group and the local
System account with Full Control. I then select the appropriate control
group or groups, or individual accounts (domain accounts) and set them
with the
: Thursday, July 22, 2004 10:47 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
1) The easiest way to see would have been to test it - the answer is
they would see the accounts and granted permissions.
2)I'm not sure what you mean? What is a standard? There isn't really
The admin tools resolve the SID to the friendly name for you. In other words, you're
not actually working with the friendly names when viewing or assigning permissions,
but this is how it appears to you.
Tony
-- Original Message --
Wrom:
Umm...
In the default install NTFS permissions are set up via GROUP ACE's instead
of the individual ACE for the local administrator account. If you look at
the NTFS permissions on %systemroot%\system32 you will see permissions only
for GROUPS not individual accounts (e.g. Administrators, Creator
-Original Message-
Wrom: YIYZUNNYCGPKYLEJGDGVCJVTLBXFGGMEPY
[mailto:[EMAIL PROTECTED] Behalf Of Rutherford,
Robert
Sent: Thursday, July 22, 2004 10:47 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
1
:[EMAIL PROTECTED] Behalf Of Tony Murray
Sent: Thursday, July 22, 2004 11:25 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Renaming The Admin Account
The admin tools resolve the SID to the friendly name for you. In other
words, you're not actually working with the friendly names when viewing
.
Rob
-Original Message-
From: Rocky Habeeb [mailto:[EMAIL PROTECTED]
Sent: 22 July 2004 16:19
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
Rob,
We set permissions on our Users PCs according to Trusted Systems
Services Windows NT Security Guidelines
that Today is the Tomorrow you were worried about Yesterday? -anon
From: Rocky HabeebSent: Thu 7/22/2004 8:18 AMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] Renaming The Admin Account
Rob,
We set permissions on our Users PCs according to Trusted Systems Services
Windows NT Security Guidelines developed
PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Tony Murray
Sent: Thursday, July 22, 2004 11:25 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Renaming The Admin Account
The admin tools resolve the SID to the friendly name for you. In other
words, you're not actually working with the friendly
. The built-in Administrator account is the only one that ends in
-500.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rocky Habeeb
Sent: Thursday, July 22, 2004 8:53 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
Right!
My point
Sent: Thu 7/22/2004 8:53 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
Right!
My point exactly!
So if your policy is to include the Domain Admin in NTFS permissions,
there's no point in renaming your Domain Admin account.
Thanks Tony.
RH
_
-Original Message-From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]On Behalf Of Deji
AkomolafeSent: Thursday, July 22, 2004 12:10 PMTo:
[EMAIL PROTECTED]Subject: RE: [ActiveDir] Renaming The
Admin Account
If you just remember
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
From: [EMAIL PROTECTED] on behalf of Rocky Habeeb
Sent: Thu 7/22/2004 10:32 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
Deji,
You know I love
__
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Thursday, July 22, 2004 2:16 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
You just prove that you are very confused about membership? Tony
IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
From: [EMAIL PROTECTED] on behalf of Rocky Habeeb
Sent: Thu 7/22/2004 12:22 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
Okay
for the flowers in your previous mails - I'll send some of them to Deano ;-)
Cheers,
Guido
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rocky Habeeb
Sent: Thursday, July 22, 2004 9:23 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Renaming The Admin Account
20 matches
Mail list logo
