Prying Fellow Administrator

[Kjonnnn]

Is there a way to stop a fellow tech with administrator right from prying into to my computer via our LAN. To be honest I don't trust him. I have no really personal information on my work computer, but he lets me how he looks and sees what I have. In a few instances, I've seen him at my computer without him seeing me.

We both have Admin rights in Windows 2000 (desktop) and network (W2003)?

 

[aledid]

1.Rename the local administrator password
2.Go to Local Security Settings\User Rights Assignments and edit the Deny Access to this computer from the network.
3.Remove share access to your C:\$
4.Report him to your/his supervisor for not respecting your privacy and abusing his rights.

 

[Stiddy]

you can monitor if he is accessing your machine buy running the following command from the command prompt:

netstat.exe
additional you can place a timer on the command so it will continually loop so you can continue to monitor it such as
netstat 5

I am sure there are other ways to see if someine is accessing your box, but if it were me and I saw him, the results from the netstat will give you his computername which I sure you already know, but I may go ahead and
net send HisComputername "Can I help you prying fellow employee?"



HTH - Stiddy

 

[bcastner]

Use NTRIGHTS.EXE

See my discussion in this thread. If you read between the lines you will find your answer: thread779-963397

You can directly download NTRIGHTS.EXE from the Resource Kit tool from:

http://www.dynawell.com/reskit/microsoft/win2000/ntrights.zip

 

[Kjonnnn]

Thanks guys....

We're the same rank. We ave the same administrative rights.

He's just one of those know it alls that ALWAYS wants to oneup you.

 

[bcastner]

Use NTRIGHTS.EXE with the remote option, and he will have zero idea what hit him.

 

[aledid]

Are you talking about the SeRemoteShutdownPrivilege?

 

[bcastner]

SeSecurityPrivilege
SeTakeOwnershipPrivilege

 

[cwyman]

Will NTRIGHTS work for XP too? I'm one of those that doesn't like snoops either so I was just curious. I've renamed my admin acct and chgd the password and all the fun stuff, but I'm just trying to be overprotective.

TIA

Carrie

BTW, I know I haven't been on the forum lately and I do apologize!

 

[bcastner]

cywyman,

Yes. I would use under XP the Windows 2003 Resrouce Kit version:

http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

Or more simply: Start, Run, secpol.msc

I warn you that fooling with ACE rights is not for the faint-hearted, and a really bad joke.