If I add a machine to a group (say, my SMS server as a local admin to my desktop), what am I exactly enabling? Accounts logged in as "Local Service" to interact with my machine? Does it mean anyone logged onto that machine would have local admin rights to my PC? I'm thinking no, but I wouldn't bet my security on it. This is where my knowledge of NT security gets a little fuzzy... David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764
~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
