Don
- Joined
- 20 Oct 2002
- Posts
- 17,145
- Location
- In a house
Did you promote your own account using the Domain admin account?
Work related (IT) issue
- Thread starter Guest2
- Start date
Sorry, dont know what that means. So no
Don
- Joined
- 20 Oct 2002
- Posts
- 17,145
- Location
- In a house
Did you try to give your own account access to things you didnt have access to before, by using the temp Domain Admin account?
This could have been possible, but i wouldnt have done anything with OU permissions. If i needed to carry out any task i enabled the temp domain admin account, did the task with the temp account then disabled it again
You have to be a domain admin to logon to the DC to actually change those settings.
And as people have said, you'd have seen some warnings before it let you actually do that. I think it's an incompetant boss trying to pass the blame.
And as people have said, you'd have seen some warnings before it let you actually do that. I think it's an incompetant boss trying to pass the blame.
Are you sure this can only be done with a domain admin account? I generally logged onto our exchange server as I used to carry out exchange tasks from time to time
Associate
- Joined
- 17 Oct 2003
- Posts
- 1,895
- Location
- Dublin
an exchange server isn't a domain controller...
Is this a general dom admin account that a pool of people enable when they need to do something? If yes then whoever has set it up like that needs shooting.
I'll check tomorrow, but I don't think you can elevate your permissions without using a domain administrator account. Seeing as you know the password to the temporary one, and appear to be able to enable/disable it, it's possible for you to use that to add yourself to the permissions of everything.
I don't think you can do all of that with a lower set of permissions, so if you know you didn't do it then someone with access to a domain admin account must have. If there is only you and your boss...
It's very bad practice, but we only use the one account where I am. And what's worse is that we actually have individual accounts, but they're domain admin accounts, too. As a Linux user, I find this a really uncomfortable situation. Everyone should run a basic account and only elevate their permissions when it is necessary to run an administrative task. Of course, I've never really cared at work because I hated my previous employerrrr.
I don't think you can do all of that with a lower set of permissions, so if you know you didn't do it then someone with access to a domain admin account must have. If there is only you and your boss...
It's very bad practice, but we only use the one account where I am. And what's worse is that we actually have individual accounts, but they're domain admin accounts, too. As a Linux user, I find this a really uncomfortable situation. Everyone should run a basic account and only elevate their permissions when it is necessary to run an administrative task. Of course, I've never really cared at work because I hated my previous employerrrr.
Last edited: