This article from Mark Russinovich explains how a user account can overcome Active Directory group policy settings due to a Windows design flaw (versus a security vulnerability). It also includes an application as a proof of concept.

http://www.sysinternals.com/blog/2005/12/circumventing-group-policy-as-limited.html

Also check out his Daily News Email List and articles.

Kind regards,

Gideon

Gideon T. Rasmussen
CISSP, CISA, CISM, SCSA
Wellington, FL
gideon@...

http://www.ussecurityawareness.org

Posted: Thu Dec 15, 2005 12:54 am

Copyright © 2002 - 2007 Gideon T. Rasmussen All Rights Reserved.
Legal Notices