Vista - One or two accounts in Vista to manage the domain

11-24-2006

As system administrator I used two accounts in Windows XP.
One account has only user access and the other account was an Domain Admin
to manage the domain.
In Windows XP I was able to run explorer with my Domain Admin account and so
I could change NTFS rights on the file system.

In Windows Vista this seems not te be possible. I can elevate my user
account to domain admin. UAC will protect the local system but not the
servers.
Without any prompt I can connect to the share C$ without any prompt. If I
can do this without any prompt every script can do this.

Is there anybody that can tell me what the most secure way is to manage the
domain without switching users (one or two accounts)?

11-24-2006	#1 (permalink)
Werfman n/a posts	One or two accounts in Vista to manage the domain As system administrator I used two accounts in Windows XP. One account has only user access and the other account was an Domain Admin to manage the domain. In Windows XP I was able to run explorer with my Domain Admin account and so I could change NTFS rights on the file system. In Windows Vista this seems not te be possible. I can elevate my user account to domain admin. UAC will protect the local system but not the servers. Without any prompt I can connect to the share C$ without any prompt. If I can do this without any prompt every script can do this. Is there anybody that can tell me what the most secure way is to manage the domain without switching users (one or two accounts)?
My System Specs

Similar Threads
Thread	Forum
Cannot Manage Accounts	Vista account administration
Re: Cannot Manage Accounts	Vista account administration
can't manage accounts	Vista account administration
user accounts don't show up on manage accounts	Vista account administration
querying domain accounts/creating domain accounts	PowerShell