Re: Who can alter User rights ?

I think you right.
But my idea was:
user rights are controlled using group policy, I think that group policy is
like front-end, and real control elements are registry keys/values. And
every registry key has it's own permissions. So If I find registry key which
corresponds to particular user right, maybe I can allow more to one
administrative account than other(administrative) accounts using registry
permissions ?
It's my guess basically, but ?

thanks
Vilius


"Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx> wrote in message
news:eXy$wFq2GHA.1256@xxxxxxxxxxxxxxxxxxxxxxx
All administrator accounts are created equal. If you can't trust someone
with the rights, take them away.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Vilius wrote:
Hi,
By default administrators can alter user rights.
Any way to control that ?
For example user Administrator can alter user rights, while other users
with administrator privileges don't.

thanks
Vilius


.

Relevant Pages

  • Re: restricting user
    ... There are a user rights that control logon, ... and/or accounts granted that user right. ... domain to allow only users to login which i wants. ...
    (microsoft.public.windows.server.security)
  • Re: Group membership
    ... I don't know if this will work for multiple systems, ... from the RUN command, type in ... control userpasswords2..this should tell you the user rights of all users. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Remote Access to Services
    ... Control what is in your ... Administrators group as a start, ... control what accounts are granted the user rights ... Currently if someone on our network opens ...
    (microsoft.public.windowsxp.security_admin)
  • How do I prevent users from installing?
    ... Administrators: Full Control ... This will prevent non-admins from installing any programs. ... >on the workstations, and use logon scripts to setup ...
    (microsoft.public.security)
  • Re: Who can alter User rights ?
    ... Co-author of "The .NET Developer's Guide to Directory Services ... And every registry key has it's own permissions. ... By default administrators can alter user rights. ... For example user Administrator can alter user rights, ...
    (microsoft.public.platformsdk.security)