Re: Who can alter User rights ?

All administrator accounts are created equal. If you can't trust someone with the rights, take them away.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Vilius wrote:
Hi,
By default administrators can alter user rights.
Any way to control that ?
For example user Administrator can alter user rights, while other users with administrator privileges don't.

thanks
Vilius


.

Relevant Pages

  • Who can alter User rights ?
    ... By default administrators can alter user rights. ... Any way to control that? ... administrator privileges don't. ...
    (microsoft.public.platformsdk.security)
  • Re: Account Rename Policy
    ... it renames the builtin administrator ID. ... Joe Richards Microsoft MVP Windows Server Directory Services ... For one of my domain controller i applied rename administrator account group policy,it is working fine,but with small Problem.It is renaming the built in administrator account also.How to prevent this one.Pls any body let me know. ...
    (microsoft.public.windows.server.active_directory)
  • Re: restricting administrators
    ... No. Don't make them an administrator unless you trust them implicitly. ... Joe Richards Microsoft MVP Windows Server Directory Services ... pdk wrote: ...
    (microsoft.public.win2000.security)