Re: event viewer

From: S. Pidgorny [MVP] (slavickp@yahoo.com)
Date: 08/06/02 

From: "S. Pidgorny [MVP]" <slavickp@yahoo.com>
Date: Tue, 6 Aug 2002 19:05:53 +1000

Can't admins reverse the setting?

I would suggest adding rights to mere users rather than trying to limit
access to admins.. 

--
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-
"B. Goodman" <no@spam.org> wrote in message
news:MPG.17b8574c73b4b27f989684@msnews.microsoft.com...
> In article <0ca301c23c50$9b22e200$a5e62ecf@tkmsftngxa07>,
> ithssszu@bh.com.pl says...
> > hi,
> > i have a question : is there any possibility to restrict
> > administrator group in nt server to view security events ?
> > i must install security log manager agent and i have deny
> > all users (admin also) to view this.
> > i saw that situation on some servers and i want to do this
> > the same.
> >
> > thanks for any help.
> > regards
> >
> > szymon szumicki
> > bank handlowy w warszawie a member of citigroup
> > warsaw
> > poland
> >
> If the server is a domain controller, just go into User Manager for
> Domains (usrmgr.exe) under the Policies menu and select "User
> Rights...".  From there, use the drop-down box to select "Manage
> auditing and security log".  Go under "Grant To:", remove
> "Administrators" and add only the account(s) or group(s) you want to
> have this permission.
>
> If the server is a member server, you need to go into User Manager for
> that server.  Probably easiest is with Start / Run and type "usrmgr \\%
> computername%" (don't actually enter the quotation marks).  At the top
> of the user manager window, you should see something like "User Manager
> - \\YourComputername".  Then, do the same thing under Policies.
>
> Remember that there is no warranty, expressed or implied, in my advice.
> Always be sure you have good backups of important files before making
> configuration changes.
>
> Good luck!
>
>
>
> B. Goodman

Relevant Pages

  • Re: Fedora Desktop future- RedHat moves
    ... in marketing and they still manage only 30% of the server market. ... I don't as yet know what Ubuntu's niche is - windows malcontents? ... servers due to the desktop support as well as gui management tools. ... Part of the issue in the past has been many admins that new Unix found ...
    (Fedora)
  • Re: AdvancedProblem:RemoteDesktop into Trusted Domain w/GP permission
    ... verify that the domainB's Remote Desktop Users group is ... actually added to DomainB's member servers groups." ... Administrators vs Domain Admins <as set on the DC in Domain Users and ... you must have Terminal Server User Access ...
    (microsoft.public.windows.server.networking)
  • Re: How to restrict DC privileges for Site Admins?
    ... By allowing those admins to log on into to the DCs you're granting them the necessary rights so that they can do whatever they want, even if they're members of backup operators or any other lowlevel group. ... You said that they need to perform maintenance tasks on the DCs, Like Backups and shutdown/restart the server, create user accounts, well to perform these tasks these admins don't need to logon the server, they can do that remotely with mmc console, etc... ... My problem, however, is the domain controller: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Migration EXC 2003 to 2007
    ... I'am trying to remove E2K7 sp1 and reinstall it but i'am stuck on the last public folder, E2K7 asks me to move the last public folder to an other server before uninstall all roles. ... the OU has been created and the exchange organisations admins were empty and exchange servers only contained the 2K7 server. ... exchange 2007 there was new OU created called MSExchange Security Group and it has the following in there: ...
    (microsoft.public.exchange.setup)
  • Re: How to restrict DC privileges for Site Admins?
    ... By allowing those admins to log on into to the DCs you're granting them the ... members of backup operators or any other lowlevel group. ... Backups and shutdown/restart the server, create user accounts, well to ... his/her "own" domain controller in order to perform relatively simple ...
    (microsoft.public.windows.server.active_directory)