True. But, to monitor services does someone have to
log on to the server? Would a good and SAFE work around - if the said user
doesn't need to log on, to create a service account to do the work, but remove
the interactive rights?
Seems to me that proxying the access would be the close to
ultimate in LUA.
Rick
--
Posting is provided "AS IS", and confers no rights or
warranties ...
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Sunday, November 20, 2005 5:21 PM
To: [email protected]
Subject: RE: [ActiveDir] Windows 2003 SP1 upgrade...
The biggest thing people complaint to me about that isn't
documented as an issue below is with the new ACL on the service control manager.
The new ACL really locks down who can enumerate services remotely. This has
impact on multiple different applications and services, especially any
monitoring that isn't using full admin IDs. Kind of sad actually, people trying
to run with least privs for the monitors got nailed and had to give out more
perms until info started getting out on how to fix the
problem.
Check out the items exposed by the following
query
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Abagnale
Sent: Sunday, November 20, 2005 3:47 PM
To: Active
Subject: [ActiveDir] Windows 2003 SP1 upgrade...
Hello all,
I am planning on rolling out SP1 to my
Domain Controllers. I have looked through msn search to find known issues with
applying SP1 to DC's.
I found the following kb articles
(below) so I can prepare if I have issues. I haven't run into any issues in
my test environment however, has anyone else had any undocumented problems they
may wish to share? One of my DC's is also a WINS, DNS, DHCP, FSMO role holder,
so any issues or pointers that you may have come up against would be
appreciated.
Also, is there any recommendation as to
which DC you choose first when you upgrade to SP1?
The Windows Time service
may generate event ID 7023 after you upgrade to Windows Server 2003 Service Pack
1
Network issues that affect TCP/IP and RPC traffic across firewall or
VPN
The incorrect HAL may be applied if your computer uses a custom HAL
Thanks
Frank
Yahoo! FareChase - Search multiple travel sites in one click.
Yahoo! FareChase - Search multiple travel sites in one click.
