IT Employment

Ask something
Discussion Locked

Windows 2k Pro Security

0 helpful
3 replies

by ldsibert 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I created a user account on this 2k machine locally as a "restricted user" group. I re booted and logged in as the user, the permissions were as expected. However, I was able to go back and change my own group level to "Administrators" machine told me to log off and back on, I did & POOF!! I had Administrator group permissions! Is it something I did wrong on the Server? or is it Windows?? Server is Advanced Server w/SP4,& Active Directory,workstations are 2k Pro. I can do this on all other workstations, so if I can do it, so can my users. Anybody seen this before? Can I fix it? Please advise, thank you in advance.

3 replies

by mrafrohead

It sounds to me that this is what happened.

You were logged in with Admin rights. You created a user "Joe" and gave "Joe" restricted access...

You then logged yourself in as "Joe" to test the login. While logged in as "Joe" you then logged out and logged back in as yourself and changed your permissions?

OR are you saying that you logged in as Joe and then changed Joe's permissions while logged in as Joe and it allowed you to give Joe Admin rights even though he was logged in as Restricted?

I haven't seen this happen before, I think that it is something that was overlooked or a step is missing. BUT if nothing is missing, you may want to run a check on some of your boxes to see if they've been 0wn3d...

Lemme know which scenario it is and I'll see if I can help.

by ldsibert

logged in as Joe and then changed Joe's permissions while logged in as Joe and it allowed me to give Joe Admin rights even though he was logged in as Restricted....exactly. Wierd isn't it?

by mrafrohead

When I get home, (either today or tomorrow) I'll test this on my home pc's and see what happens.

I'm thinking you may have a bug (virus) but I could be wrong. Maybe you stumbled upon a bug.

Who know's, but I'll be able to verify soemthing so you have something to go off of, hopefully by tomorrow.

This discussion is closed to new replies.