Bypassing company's security policies

hi folks, just want to find out if there r ways to bypass company's security policies which r pushed down to computers? i just want to test out if i push down a policy (E.g. to prevent user from installing programs), how can user bypass?

As long the end user have "Local Admins" right to the machine; the computer simply assume that he/she has full control of the machine. (see the weakness!)

Same theory applies to the others default roles on the local machine. They have certain level of rights to write/read to the registry keys.

GPO is never be the only answer to secure your computer in your environment.

 

So if user doesn't have local admin rights then they can't bypass right?

In theory, that's correct.

Remember: Lot of smart users out there know how to decrypt or reset the local admin password without admin knowing. Just take note. Cheers!

decrypt or reset admin password? is there such technique?

Example:

Decrypt the local Administrator password using the public decrypt key from:

msdn.microsoft.com/en-us/library/2c15cbf....aspx#endNote2?›???

Cheers!