Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

everal Problems, Admin Local Lockout, Security Issues

Status
Not open for further replies.

danp123

Technical User
May 24, 2003
106
GB
Hi,
Having a rather large problem here, i can log onto everycomputer in my domain (named CLASS (its a school i work in)) with my admin user and password however when i try to log onto a standalone computet it wont let me in at all, is there any way around this? I tried administrator instead of admin as user but my password remains the same as far as i know. I need to access the machine as a standalone because the childeren in my school are doing a GNVQ ICT course and must not be on an already network configured computer, i.e they set it up in standalone mode. I would prefer not to let them on our £4000 server!
Also when adding a new user to the admin group in poledit and using active directory i come across the same problem, domain admin but not local admin

Is there any way the kids at my school can access the poledit programs in start > programs > administrator programs area, these are by default hidden however using insert picuture in word they are accessing the admin start menu then renaming the file and running it i thinik. This is only a theory because as usual they are Stubborn. I have seen about them using autoexec.bat to reload a windows logon box without the domain selector then gaining themseleves local admin priviages (perheaps how i have been locked out)

They have also found a way of accessing c:\ using a new shortcut or web toolbar, this poses a risk as far as i am concerned because they can then acces winnt system 32 directory and run command.com which is giving them full admin privilages in the dos prompt mode. s there any thing else they can do through this to give them such privilages domain wide

Right once you have finsihed reading all of that it would be nice for a reply !

Thanks

Dan
P.S i would rather not use anything which accesses the NTFS partition on the W2k Machines because the data held on these disks is paramount and i can already access c.

Machines Are
W2k Pro
Pentium 3
Running through server also win 2k and running most hotfixes and service packs. The main program they are trying to access is the classlink monitoring program, known as Remote Learning tutor, then causing hell with peoples work and any logged on user including several members of our staff who have expericend screen blanks ( which the program does also) and then having there privlages exploited because they later find that their data has found its way onto the local u:\ (where data is sotred)
Hope there is enough info if you need more just post
 
Hello,
You need tobe cached on the local PC before you can get in. If the PC is not on the Network and you did not login into it on the network you will not beable to get into it locally! This is a Win2000 thing! If you know the admin password for this local PC then you could login like that, then setup a account for you?
 
There are various freely-available bootable recovery diskettes and CD's available which allow you to blank out the password for Administrator (or any user on that particular box) which is another avenue you may not have thought of yet.

Remember, without physical security there can be no security!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top