Randy Franklin Smith - Articles on User Access and Rights
most recent | by year | by subject
Granting Users the Authority to Unlock Other Users' Accounts
Do you want certain users to be able to unlock other users’ accounts without granting them the authority to reset users’ passwords? Find out how to use the Active Directory Users and Computers snap-in to do just that.
<more>
Granting Users Read Access to the Registry
Do you need to give users the authority to monitor the performance of your servers without giving them administrator authority? Find out how to grant users remote access to only certain areas of the registry. <more>
Assigning Administrators Ownership of Objects. To prevent users from modifying an object's permissions, you can change the ownership of the object and enable object access auditing. <more>
Requiring DC Authentication to Unlock Workstations. Find out how to require DC authentication to unlock user workstations and why you might not want to. <more>
Creating a Domain Global Group Called Member Computer Local Admins. Don't give computers Domain Admins rights to deploy SMS to clients; if you do, both the computer and its administrator have full access to AD. <more>
Using Logon Rights to Secure AD Service Accounts. You can keep AD service accounts from being used to log on to your network by locking down those accounts with logon rights. <more>
Security Annoyances. Information security presents a variety of headaches, such as password resets, wireless access, and patch management. Learn about 6 of the most annoying—as well as what you can do to overcome them. <more>
Access Control. For a more secure network, limit users to only the resources and levels of access they require. <more>
Limiting Users' Ability to Add a Workstation to the Domain. Disable Add workstation to the domain right in the Default Domain Controller Policy GPO, and make sure the Create Computer permission isn't granted to a broad user group. <more>
Letting a User Start and Stop Services Without Granting the User Administrator Privileges. You can use ACLs to grant services specific start and stop permissions. <more>
L2TP Remote Access. Learn how you can use L2TP to enable
a strong, two-factor authentication VPN for your remote users. <more>
Controlling User Account Logons. By understanding and using NT's global,
user-specific, and registry-level policies, you can effectively guard
entry into your domain. <more>
EFS Enhancements in Windows XP. Windows XP improves EFS data recovery
but introduces a key flaw in EFS's new password reset disk feature. <more>
Controlling User Rights and Built-in Groups. Put some careful thought
into how you assign NT's user rights and built-in group membership.
Doing so will increase your network's fundamental security. <more>
Win2K Password Protection. Win2K's password protection is stronger
than NT's, but backward compatibility can leave Win2K systems vulnerable. <more>
Effective Access Control for Win2K and NT. A two-level access-control
method can help you regulate access to system resources. <more>
Protect Administrator Privileges. Understand Windows NT's weaknesses
so that you can protect and monitor your administrator accounts. <more>
SAM/PS, P-Synch 3.5 Password synchronization made
easy. <more>
Protect Your Passwords. User passwords can fall through several NT
security holes, but you can change a few network and system settings
to make your network's passwords harder to hack. <more>
Granting Permission to Add Workstations. To give your workstation team authority to add computers to the domain, grant the team the Create computer object permission on the OUs in which the team needs to add new computers. <more>
Get this valuable commentary each month as soon as Microsoft releases security updates!
Free log parser scripts, a clear explanation of Microsoft's
latest security bulletin, helpful security tips, how-to's and more.
|
