* Secure physical access * Don't allow people to boot alternate OSes
* Do your workstations need to have $ shares enabled? Or available (e.g. block with firewall/router) *if* these are admin workstations * Randomize local Administrator passwords * Do not login locally to workstations with Domain Admin credentials. Login with normal credentials. Use other tools (e.g. RDP) with admin credentials to secured jump box or servers * Etc, etc Cheers Ken From: James Rankin [mailto:[email protected]] Sent: Thursday, 22 October 2009 7:56 PM To: NT System Admin Issues Subject: Hmmm....anyone have any thoughts on this? http://securitytube.net/How-to-own-a-Windows-Domain-video.aspx Or mitigating against it, specifically....although I am not sure how effective an attack this is. I would think blocking USB access and maintaining application whitelists would be my personal first step. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
