Q236294: Domain Admins Group Has Full Network Access

Article: Q236294
Product(s): Microsoft Windows 95.x Retail Product
Version(s): WINDOWS:95,98
Operating System(s): 
Keyword(s): 
Last Modified: 17-DEC-2000

-------------------------------------------------------------------------------
The information in this article applies to:

- Microsoft Windows 95 
- Microsoft Windows 98 
-------------------------------------------------------------------------------

SUMMARY
=======

You can grant network access to members of the Domain Admins group on a computer
running Microsoft Windows 95 or Microsoft Windows 98, without explicitly adding
the Domain Admins group to share permissions.

MORE INFORMATION
================

By default, members of the Domain Admins group have full access permissions to
all shared resources after you enable user-level security (either by using the
Network tool in Control Panel or by specifying a Setup script).

Remote administration is enabled automatically with access granted to the Domain
Admins groups on a Windows NT domain. On a Novell NetWare network, the
Supervisor account (for version 3.x) or the Admin account (for version 4.0) is
automatically granted access.

Granting remote administration privileges gives a user full access to all shared
resources on the system (including the ability to add and remove other remote
administrators). If you want to enable user-level security without automatically
enabling remote administration, you can use system policies to enable the
User-Level Access Control option.

To manually modify remote administration:

1. Click Start, point to Settings, click Control Panel, and then double-click
  Passwords.

2. On the Remote Administration tab, clear the "Enable Remote Administration of
  this server" check box.

3. Click Add, to add any appropriate administrators.

REFERENCES
==========

For additional information, please see the following article in the Microsoft
Knowledge Base:

  Q141460 How to Install Remote Administration Services

Additional query words: denied control

======================================================================
Keywords          :  
Technology        : kbWin95search kbWin98search kbZNotKeyword3 kbWin98
Version           : WINDOWS:95,98
Issue type        : kbinfo

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 1986-2002.