Announcement

Collapse
No announcement yet.

restrict users from dumping users

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • restrict users from dumping users

    Hi All,

    Running Windows server 2003 domain controller,
    and I just found out that anyone in the domain can dump the active directory....

    list all users, homedirs, etc into a file.

    How can I restrict the access to such thing? i.e only allow Domain Admins to do this, rather than any jo-public users...

    Many thanks

  • #2
    Re: restrict users from dumping users

    Hi ,

    Check that are your users are logging in their desktop and authenticated as a server admin in control panel --> users .

    Comment


    • #3
      Re: restrict users from dumping users

      I have over 2000 users on the domain and only 5 of them (including me) are domain admins,
      everyone else are non-admin users.

      as I have a temp account which is a non-admin user, I can dump all users from the active directory which I think maybe a security flaw.

      But you can't dump all users from the active directory when you're not authenticated to the domain.

      I do like to deny access to everyone - other than domain admins, to do such thing.

      Man thanks

      Comment

      Working...
      X