Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [domain-admin]

The tag has no usage guidance.

1
vote
1answer
99 views

My boss installs software using domain admin. Should I show that this is bad?

At my workplace, users on most workstations (Win7 and 10 blend) do not have local admin rights. As a technical team we often need this for software installs, and so the director gets called around to ...
0
votes
0answers
46 views

How to run command as privileged Windows service account against Active Directory domain controller?

I've compromised a Windows machine that leaks the password of a privileged service account ("Domain Admin") in memory (legal penetration test). Since the account is a service account, it cannot be ...
-1
votes
0answers
47 views

Local Group Administrator Account shared across network?

I am a bit confused on the local group administrator account role. I managed to obtain domain administrator on a recent pentest but looking back at my results I am somewhat confused the actual ...
5
votes
2answers
182 views

Is there a more secure way for users to log into the domain other than just passwords?

Say you have this: An NPS server that grants access to users using client certificates (EAP-TLS). So for example someone managed to snatch the domain administrator's password and they log in to the ...
1
vote
1answer
303 views

Can I access my own account logs at Godaddy without a subpoena? [closed]

I have some evidence that our Godaddy domain account has been tampered with, by a former administrator with access to the account credentials. To prove that the account was accessed, I need, at the ...
6
votes
2answers
113 views

Securing a process from local users

We require a method to run a process on a users machine whereby a local user cannot kill this process (from task manager or otherwise). Is there a way to make this application a system process or make ...
0
votes
1answer
59 views

Implications of joining the active directory domain with the domain administrator

I always used the domain administrator to join the active directory domain, but I've never set up more than a few machines. Is that considered a security risk, is the end-user somehow able to obtain ...
9
votes
1answer
282 views

Will enforcing this restriction on Domain Admins “break the network”?

Let's say we secure all servers in the domain.. Domain controllers allow RDP access only from jump servers Domain admins can't connect to non-dc servers And so forth This is all swell and should be ...
3
votes
1answer
763 views

Use local admin or domain admin to raise privileges on a machine for administrative purposes?

By now I would hope that, unless there were extenuating circumstances, all users (including administrative users) use a low-level account for their daily activities and raise their permissions to ...
1
vote
3answers
9k views

What information can my network admin see when I visit a website? [duplicate]

This question is similar to this but for my network admin. For example, when I enter this URL: https://www.google.com/search?q=example or ... I can see the word example that I was searching on ...
4
votes
1answer
77 views

How does a Registrar/Domain Lock increase security?

I have all of my domains locked, so that they cannot be transferred without first unlocking. However, I can't think of any scenario where this lock increases security. In order to transfer, one must ...
2
votes
1answer
339 views

Security Administrator Windows Roles

I find that security administrators often need to perform vulnerability checks on systems and these tasks need at least domain or local administrative rights. Does the security administrator need full ...
1
vote
0answers
106 views

Domain Exploitation [closed]

I have set up a domain testing environment on a couple of old computers that i had lying around at home. I have done a lot of information gathering and attempts at exploiting the machines via ...
16
votes
8answers
10k views

Monitoring Active Directory Domain Administrator Activities

I need to monitor Active Directory domain administrator activities and look for the following: Looking for anomalies in daily activity Getting alerted upon a violation My problem is that turning on ...
1
vote
2answers
350 views

How to secure sensitive information on cloud from administrator (end-to-end encryption)

When I use end-to-end encryption to secure documents and sensitive information on cloud or on computer, there is always a risk of accessing these information by administrator. For example if you use ...
6
votes
3answers
373 views

Does domain privacy make a domain less secure?

Does buying domain privacy make the domain more secure against hijacking? Would it make the domain less secure against losing it, if the registar gets bankrupt? I am afraid that the domain could be ...
2
votes
2answers
977 views

Can I force unique passwords for domain admin accounts?

Best practices would dictate that domain admins should not be logged into as such for daily tasks. Ideally the user would have two accounts; Their "daily" account and their domain admin account. How ...
2
votes
1answer
82 views

Display link to admin section or not?

I have a question and answers site. I have an admin section. From that section I can delete users, threads, responses, and edit various other things. I have some simple code at the start of the admin ...
1
vote
2answers
95 views

Requesting administrative access in a company

I have been given the task of defining a process for assigning administrative access. One of the requirements for this processs is that if a subject wishes to gain adminstrative access, only the ...
1
vote
0answers
112 views

Does whosthere.exe of pth toolkit have to run with administrative rights?

To see the users that are connected to the machine and they're pass hashes with Whosthere.exe, do I have to run it as an administrator?
5
votes
4answers
6k views

Are non-personal AD users a security risk?

After an IT audit of my company, the report said that our Active Directory contained too many non-personal user accounts. This caused a risk of misuse and unauthorized user access. I checked my ...
4
votes
1answer
20k views

Creating a domain admin account from NT\System access

So I've popped a shell on a primary domain controller (PDC) which has NT\SYSTEM permissions on the box. I've created a local admin user account using the following commands: net user myname myc0mpl3x ...