Jump to content

madness

Active Members
  • Posts

    3
  • Joined

  • Last visited

Everything posted by madness

  1. I understand that part. What I am attempting to accomplish is create alerting events that flag on giving a local user admin powers without putting them in the local admin group. I am assuming that this can be done by tweaking various local group policy settings or registry entries. I am a security admin working on advanced alerting to ensure that elevation of privileges cant be given under the radar. If a rogue admin was to create a local user and elevate their privileges through local policy and registry, they could possibly get by security controls. I need to know what specific rights make an account an admin account. Thanks for the responses.
  2. I pose a question to the community. If i create an account on a local Windows machine and do not put the account into any local groups, how does that account become a local admin WITHOUT inserting it into the pre-canned groups.
×
×
  • Create New...