New answers tagged permissions
This is a perfect example of how Security Groups and the Best Practices concept of Separation of Duties comes into play. Create security groups for your users, by departmental or functional role - one of those security groups should be something like "Helpdesk-LocalAdmin" (choose something consistent with your own naming convention - if you don't have a ...
So I guess what I am asking is: Is there a way to get into other users on the server's files and change stuff? Of course there is. There is always a way in. Is there a timeout on the password attempts? If not, you could try a brute force or dictionary attack, there are thousands of programs designed to do something like this. For example, Cain and ...
If you're assuming that the malware is running as a UAC limited user, then you should assume that it has the capability to escalate itself to administrator. Privesc on Windows is trivial, since you can just trick the user into thinking a legit software update operation is occurring and they'll almost always accept the escalation prompt. There are many other ...
Normal user and sudo, always: you want to spend as little time being root as possible. As a bonus, the act of sudoing before giving a command reminds you to be careful.
Top 50 recent answers are included