Blocking Dameware from remotely administering windows 2000

[ckkent]

Hi, is there a way that I can block Dameware NT Utilities from seeing or remotely administering my windows 2000 server? Because I found this product very helpful but also dangerous if someone other than the administrators have admin access in the server.

 

[porkchopexpress]

someone other than the administrators have admin access in the server

How do you mean? If they're an admin then they are an administrator making sure that anyone that you don't trust doesn't have admin rights is absolutely critical.

You could install the dameware service and then disable it this will prevent anyone making a connection to install the client but an admin could still enable the service.

 

[ckkent]

Hi, thanks for the reply.

I mean if someone illegally got a hold of one of the administrators account they could use dameware to administer the server.

About the dameware service, isn't this for remote controlling only so you could see/control the remote computer's desktop? Would this be able to stop it from administering it? Because you could still administer the server remotely without this service, couldn't you? Please correct me if I'm wrong, I just started using this dameware so I'm not very much familiar yet.

 

[Roadki11]

If someone "illegally got a hold of one of the administrators account" dameware would be the least of your problems, so to speak. Limit admin accounts to only people that absolutely need them, enforce strong passwords, keep machines patched up would be a better use of your time.

Just my 2 cents,

RoadKi11

 

[porkchopexpress]

I was thinking of Dameware Mini Remote not the whole NT Utilities package sorry but this still doesn't change anything a user with admin rights could perform almost any administrative function remotely without dameware the key is to make sure no one ever gets an admin account.

The principle of least privilege is what you should be thinking about make sure that no one has more rights than they need to servers and that very few people have domain admin rights.

and as Roadki11 says enforce strong passwords and keep on top of patches for all services not just Windows.