Darren New wrote:
> Invisible wrote:
>> - Allow Administrators to pretend to be another user, without having 
>> to know that user's password.
> 
> Sure. We all wish security would let administrators make changes to the 
> system they could blame on other users. :-)
> 
>> There are times when, in order to configure something, you have to log 
>> in under the user's account before you can configure it. 
> 
> Not really. That's the easiest way to do it, but it isn't necessary. 
> Everything about the user is stored in the file system, so...
> 
> If you knew how to work it, you could do it. Do you think people at 
> Microsoft or American Express hang around to enter their passwords while 
> the sysadmin fixes things?
> 
>> - Allow Administrators to unlock a workstation without destroying all 
>> of the user's unsaved work. (IOW, without terminating all the stuff 
>> they have running.)
> 
> Wouldn't be much of a lock, would it?
> 
>> - Log security events in a meaningful way.
>> Do you know what
>>
>>   Object Access Attempt:
>>   Object Server:Security
>>   Handle ID:144
>>   Object Type:File
>>   Process ID:3156
>>   Image File Name:C:\WINDOWS\system32\notepad.exe
>>   Accesses:WriteData
>>   Access Mask:0x6
>>
>> means? I certainly don't.
> 
> You didn't provide the actual interesting information, which is the 
> Event ID.
> 
> http://www.microsoft.com/technet/support/ee/ee_advanced.aspx
> 
>> But then, this isn't human-readable data. This is simply a raw dump of 
>> the low-level internal data structures that Windows itself uses to 
>> manage object access. 
> 
> Not really. It's the codes the OS passed to be recorded in the event logs.
> 
>> As it is, all over the company we have event logs full of gibberish 
>> like this that nobody can understand. We might as well not bother 
>> logging it...
> 
> Or, alternately, you could learn what the codes mean.
> 
Because.. Providing administrators with... I don't know, something that 
could tell them, so they don't have to look it up, or memorize 4,000 
codes, would just what? Make too much sense? lol

-- 
void main () {
   If Schrödingers_cat is alive or version > 98 {
     if version = "Vista" {
       call slow_by_half();
       call DRM_everything();
     }
     call functional_code();
   }
   else
     call crash_windows();
}

<A HREF='http://www.daz3d.com/index.php?refid=16130551'>Get 3D Models, 
3D Content, and 3D Software at DAZ3D!</A>

Post a reply to this message