|
![](/i/fill.gif) |
Darren New wrote:
> Invisible wrote:
>> - Allow Administrators to pretend to be another user, without having
>> to know that user's password.
>
> Sure. We all wish security would let administrators make changes to the
> system they could blame on other users. :-)
>
>> There are times when, in order to configure something, you have to log
>> in under the user's account before you can configure it.
>
> Not really. That's the easiest way to do it, but it isn't necessary.
> Everything about the user is stored in the file system, so...
>
> If you knew how to work it, you could do it. Do you think people at
> Microsoft or American Express hang around to enter their passwords while
> the sysadmin fixes things?
>
>> - Allow Administrators to unlock a workstation without destroying all
>> of the user's unsaved work. (IOW, without terminating all the stuff
>> they have running.)
>
> Wouldn't be much of a lock, would it?
>
>> - Log security events in a meaningful way.
>> Do you know what
>>
>> Object Access Attempt:
>> Object Server:Security
>> Handle ID:144
>> Object Type:File
>> Process ID:3156
>> Image File Name:C:\WINDOWS\system32\notepad.exe
>> Accesses:WriteData
>> Access Mask:0x6
>>
>> means? I certainly don't.
>
> You didn't provide the actual interesting information, which is the
> Event ID.
>
> http://www.microsoft.com/technet/support/ee/ee_advanced.aspx
>
>> But then, this isn't human-readable data. This is simply a raw dump of
>> the low-level internal data structures that Windows itself uses to
>> manage object access.
>
> Not really. It's the codes the OS passed to be recorded in the event logs.
>
>> As it is, all over the company we have event logs full of gibberish
>> like this that nobody can understand. We might as well not bother
>> logging it...
>
> Or, alternately, you could learn what the codes mean.
>
Because.. Providing administrators with... I don't know, something that
could tell them, so they don't have to look it up, or memorize 4,000
codes, would just what? Make too much sense? lol
--
void main () {
If Schrödingers_cat is alive or version > 98 {
if version = "Vista" {
call slow_by_half();
call DRM_everything();
}
call functional_code();
}
else
call crash_windows();
}
<A HREF='http://www.daz3d.com/index.php?refid=16130551'>Get 3D Models,
3D Content, and 3D Software at DAZ3D!</A>
Post a reply to this message
|
![](/i/fill.gif) |