Windows 2000 admin automatically gets supervisior rights to Novell

[DavePL]

We have a Novell network, and one of our clients has a Windows 2000 Advanced Server. He has administrator rights to his own server, and regular user rights to the Novell server. However, when he logs in he has full supervisor rights to all the volumes of the Novell server.

We are wondering if there is there a way to block some of his rights to Novell?

 

[yvfwc]

Does he have inherited rights through a group or user? Is he a trustee of the O, OU, or server/server volume(s). Has he been given direct rights to files & directories in his user properties? I would most likely think he has rights that are inherited through another user or group but check the user granted rights first.

Cheers,

Mark ;-)

 

[DavePL]

We looked at group membership and trustee assignments, and he doesn't seem to have any additional trustee assignments, or rights other than a regular user.

When we look at effective rights in NWADMIN, it just shows Read and File Scan to most of the volume, or no rights.

He seems to be getting Novell admin rights through the Windows 2000 server. So we're wondering if we may have to modify his 2000 server, to block the additional rights.

 

[yizhar]

HI!

Maybe someone has mapped a drive to netware volume, using admin name and password, then allowing windows to cache (save) the password.

I suggest simply change the netware admin password and see what happens.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar