[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Full-Disclosure] W2k users, local admin rights and GPOs
- To: "James Exim" <security@exim.dyndns.org>, <full-disclosure@lists.netsys.com>
- Subject: RE: [Full-Disclosure] W2k users, local admin rights and GPOs
- From: "Sergey V. Gordeychik" <gordey@infosec.ru>
- Date: Wed, 29 Oct 2003 17:48:01 +0300
So, I got an idea.
Everybody, who can drop pings, or SMB commutations, from his local
machine to DC can prevent GPO updates!
User can use IPSec policy (sic!) to do it :-)
So, Laura right :-)
And I'm wrong :-(
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html