Re: NT4 Granular Settings for Administrators

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/20/04 

Date: Fri, 20 Feb 2004 00:20:34 -0700

Somethings usually considered an admin right can be found
as grants and so provided to custom groups. Many are only
hardwired.
If you cannot live with Account Operators set of rights, and
wish something more restrictive, then you will be rolling your
own, such as with a component that can do more, but will only
do what you have coded, and then grant your custom group the
use of this. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
<anonymous@discussions.microsoft.com> wrote in message
news:131c701c3f730$5dfbf4b0$a001280a@phx.gbl...
> In an NT4 Domain, is it possible to set granular rights
> for account operators? What I am trying to do is grant a
> small team rights to reset domain user accounts only. Is
> there a way to create a local group with certain rights
> on the PDC that would allow this?
>
> any suggestions would be welcome

Relevant Pages

  • Re: more user account options?
    ... and these custom groups can be used to grant some ... installing applications that install for all users instead ... > If not is there any way to give a limited account user ...
    (microsoft.public.windowsxp.security_admin)
  • Re: user account for ftp task
    ... Then I had to grant the user read permission on C:\ and the file I ... I tried using the SYSTEM account. ... file rights. ...
    (microsoft.public.windows.server.general)
  • Re: Account Lock out
    ... This is difference question on how to what rights to grant so that a domain ... user account will have unlimited number times to join workstations as a ... Domain administrator account to join workstation to the domain) ...
    (microsoft.public.windows.server.active_directory)
  • Re: Exchange Dummy Account
    ... You can create an account and grant Send As rights to it, ... "There are seldom good technological solutions to behavioral problems." ...
    (microsoft.public.exchange.admin)
  • RE: Restrict Windows login to certain IPs/hosts for certain domain accounts?
    ... servers rather than trying to grant broader rights and then restrict the ... login footprint where that account is valid. ... those servers, then modify existing GPOs ...
    (Focus-Microsoft)