Re: Domain Admin Server 2003

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 10/26/04 

Date: Tue, 26 Oct 2004 18:29:36 GMT

Make sure that your account is in the OU that you have full control over. I
believe that you can only manage regular user accounts when you are
delegated full control to an OU. If your or any account is in a privileged
group such as server operator, backup operator, etc then you will not be
able to manage it as a regular user that has been delegated permissions for
user accounts. --- Steve

"Bruce" <Bruce@discussions.microsoft.com> wrote in message
news:154FAD01-7CC8-40F3-B1CB-02E64ACADB1D@microsoft.com...
>I had delegated Full rights to my OU's and then was granted Domain Admin
> rights to perform a migration from NetWare to server 2003. The domain
> Admin
> rights have since been taken away and I once again have delegated full
> rights
> to my OU's. I was able to manage my own account before I was granted
> Domain
> Admin rights but since they have been taken away I cannot manage my own
> account, all things are grayed out on the first line of tabs. How can I
> get
> the ability to manage my own account without having Domain Admin rights?
> --
> Bruce Fiedler

Relevant Pages

  • Re: Incoming E-Mail - cant create contact in OU
    ... I am using WSS 3.0 and I have 3 WSS web ... are running under the domain user account of "Domain\Sharepoint_AppID" ... I then delegated the rights for the same ... when you had that account set as a domain admin for the domain, ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > By adding the Deny Write Permissions ACE, ... > permission to modify the ACL on AdminSDHolder. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows 2003 Users vs Software
    ... You need to have both an admin and a limited account ... >> as a limited user, to effect, "the software has not been installed ... The users do not have rights to install programs. ...
    (microsoft.public.security)
  • Re: Incoming E-Mail - cant create contact in OU
    ... already have the application pool delegated rights to the OU. ... In my experience it is because you didn't quite delegate enough rights to ... the account in the OU. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... Go to the OU in security/advanced I added my sharepoint application pool ... that account a little (if the web app is compromised or something, ... Now I understand that you have given the account "full rights" of the OU, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)