Re: totaly removing the default share on a PC joining the Active Directory

[EMAIL PROTECTED] (Eddy) wrote in message news:<[EMAIL PROTECTED]>...
> Matt Hayes <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>...
> > Eddy wrote:
> > > Hi all,
> > > 
> > > If can anyone help me with this, will be great.
> > > 
> > > I am a domain administrator, running windows 2000 Adv Server, and
> > > windows 2000 Pro and windows XP on clients side.
> > > 
> > > One of them has done something, and now i am not able to access that
> > > server;
> > > Start --> run:
> > > \\computername\c$
> > > It gives me username and password.
> > > 
> > > I put username and password of the administrator, it won't let me go
> > > in,
> > > it regives me the username and password box.
> > > 
> > > I tried to put DOMAIN\username and password, same problem.
> > > 
> > > I went physicaly to that PC, and logged on with administrator.
> > > 
> > > It gives access denied on any folder i want to access.
> > > 
> > > I tried to change the owner, replace..., i couldn't. It says you don't
> > > have access to change them.
> > > 
> > > What do you think the problem is, and how can i solve this.
> > > 
> > > Thanks and appreciate it anyway.
> > > 
> > > Eddy
> > 
> > Eddy,
> > 
> > I ran into this same problem where I work.  The user had edited the 
> > security settings for the C$ share.  He had removed Domain Admins and 
> > local Administrators and kept himself as an admin.
> > 
> > The only suggestion I have for you is to tell the user to put the Domain 
> > Admin group back in and then strip some of his security away so he can't 
> > do that anymore.
> > 
> > Matt
> 
> 
> That's True Matt,
> 
> but there must be a way for the administrator to put back that domain
> admins right.
> 
> I don't know, but there must be a way for the administrator (from the
> domain control server itself maybe or.... to put back the domain
> admins right on that Computer).
> 
> Any suggestions?
> 
> Thanks
> 
> Eddy


the domain admin does not loose the permissions unless the user
reinstalled the workstation or he disjoined the ws from the domain.
you could do 2 things
1. reinstall the system and take the user out of the admin,
localadmin, domainadmins, powerusers, and just be a user, even to the
local system or

2. deny access to that computer on the domain to any shares and to the
internet and wait until the user comes crawling down asking for
forgiveness, then do 1.