A simple security change in the local administrators group for domain users.

It’s common that you see in the local administrators group of a laptop or pc. That the domain users are added to it. Well some security issues could exist.. Like other domain users can run program’s on your computer while your are logged in.

This issue you could change to Authenticated users. ( this group will not be shown in the search option of the computer when you want to add this user group to the local administrators group. )

What you have to do is remove Domain Users from the local administrators group and use the next command to add the Authenticated users.

Net localgroup administrators “authenticated users” /add

You could test it and it should work that only the local user can changes computer settings while he is logged in to the computer at the moment.

Advertisements

One thought on “A simple security change in the local administrators group for domain users.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s