Xatrix Security

[hello1234567891]

Today I just got hold of an admin account, I was having a look at the root server and found a folder called sysadmin so I had a look, it was all the admin users ovbiously I couldn't look at the files inside the folders on my student account so I wrote the users down and logged off. The first one I tried was Setup and the first password I tried was setup and lo and behold it worked! gosh the admins at my school are dumb!
anyway I only got to the desktop then I had to log off as the fire bell went off, stupid smoke alarm in the DT rooms, but there was rm management console and a range of other things there.
Next time I am in one of the IT rooms I will see what else is there, anything you advise me on doing?
I don't want to do anything bad .... yet I am just going to wait untill I finish my GCSE's.

[beartom]

Well, first and formost, congrats on getting into the Setup account!



Although, the Setup account is only used in the process of commissioning a workstation, and by default, is given no management rights. So although there was the Management Console icon on the desktop, it dosen't necessarily mean that the user has admin rights.

Another word of advice, as I have learnt myself, never log into an account you shouldn't be on in an ICT lesson, as technicians do safe guard very closely, the subject that they manage, a lot more than a subject like Art or Technology.

And if you're close to doing your GCSE's, stay clear of doing anything, too malicious.



Hope this helps!

[hello1234567891]

well I have a free period tomorrow so I can play around with it then

[ICT Tech]

Although, the Setup account is only used in the process of commissioning a workstation, and by default, is given no management rights. So although there was the Management Console icon on the desktop, it dosen't necessarily mean that the user has admin rights.

I am going to have to argue with you ther beartom.
The Setup user is one of the most powerful users on the RM Network.

It is a member of the Domain Admins and practically every Admin Group there is on the Network.

[ICT Tech]

Okay,

I've just opened the Setup User in the RM Management Console

There are 2 main boxes.

"Authority" and "UserType"

In the Authoriy box you have:
None
Delegate
Authorise
Network
Domain Admin

In the UserType box you have:
Restricted User
Standard User
Advanced User
Staff
Advanced Staff
System Administrator

The Setup User has:
Authority - Domain Admin
UserType - System Administrator

Like I said, one of the most powerful users on the RM Network

[hello1234567891]

oooo sounds good so what should I do with it?

Are there any files which the workstations loads on startup/login that I could maybe fiddle with?

Today I did see a batch file which I guess is loaded on startup saying which network shares to map for different user types.

[coldfire54]

Is there a way to find the setup account?

[muto]

should be setup : setup, or setup : rm

[massiv3]

or the default as "Change_Me" without the quotes.

[muto]

That's the default? Christ, that means my school _intentionally_ changed the password to `setup`, then later to `rm`...