User Privilege Management - China DOS Union Forum - China DOS Union

All the clients in our company are W2K PRO, and they all log into the LAN using USER
(As for ADMINISTRATOR, nobody in the company except me knows the password, so they have no way to log in with that username).
As for the permissions of user USER, it is only added to the USERS group and has no other permissions at all. Under normal circumstances, none of the
users can install software, such as QQ, because when installing it will prompt that there are not enough permissions to install.
But recently I found that QQ is running on some clients, and it's the latest 2003 version, but USER doesn't have permission to install it, so I don't know what's going on.
Have you run into a similar situation?

My suspicion (without cracking) is:
1. Could it be that he knows my ADMINISTRATOR password? But after I logged in with ADMINISTRATOR,
there was no trace of QQ. Later I found that
it was installed in the C:\Documents and Settings\user\My Documents directory. This shows it was not installed using
ADMINISTRATOR, so it can also be concluded that he still doesn't know the ADMINISTRATOR password.
2. Under normal circumstances, he can change his own permissions, but when I logged in with USER and tried to enter Local Security Policy in Administrative Tools, it prompted
that I had no permission to modify it. This shows that he cannot change his own permissions.
3. So I think maybe W2K PRO has a BUG? And he is using this BUG to change his own permissions.

Hope someone who knows can help me!!

Floor1　reakal	Posted 2004-01-13 00:00
中级用户　Posts 29　Credits 205
All the clients in our company are W2K PRO, and they all log into the LAN using USER (As for ADMINISTRATOR, nobody in the company except me knows the password, so they have no way to log in with that username). As for the permissions of user USER, it is only added to the USERS group and has no other permissions at all. Under normal circumstances, none of the users can install software, such as QQ, because when installing it will prompt that there are not enough permissions to install. But recently I found that QQ is running on some clients, and it's the latest 2003 version, but USER doesn't have permission to install it, so I don't know what's going on. Have you run into a similar situation? My suspicion (without cracking) is: 1. Could it be that he knows my ADMINISTRATOR password? But after I logged in with ADMINISTRATOR, there was no trace of QQ. Later I found that it was installed in the C:\Documents and Settings\user\My Documents directory. This shows it was not installed using ADMINISTRATOR, so it can also be concluded that he still doesn't know the ADMINISTRATOR password. 2. Under normal circumstances, he can change his own permissions, but when I logged in with USER and tried to enter Local Security Policy in Administrative Tools, it prompted that I had no permission to modify it. This shows that he cannot change his own permissions. 3. So I think maybe W2K PRO has a BUG? And he is using this BUG to change his own permissions. Hope someone who knows can help me!!

Floor2　guozai	Posted 2004-01-14 00:00
初级用户　Posts 2　Credits 110
Just download a no-installation edition and it will work.