Administrator and Domain Administrator

From: David M. Streb, MCSE (exiis@hotmail.com)
Date: 08/12/02


From: "David M. Streb, MCSE" <exiis@hotmail.com>
Date: Mon, 12 Aug 2002 08:29:50 -0700


I've asked this in the past, and have always received a quasi-general
response, such as use policies to control the problem. Please provide a
specific solution to my question.

The "Domain Admin" can change passwords at will--including the Administrator
password. I would like a suggestion on how we can protect the all-powerful
Administrator account from having its password 'reset' by a Domain
Administrator. It seems foolish to create and enforce a complex password
policy for this account when any Domain Admin can simply change it at his
will.

--
David M. Streb, MCSE
Exiis Communications
Full Service Network Solutions
http://www.exiis.net/
dave@exiis "dot" net


Relevant Pages

  • Re: Local Admin on Domain Controller?
    ... You need to make sure that you are separating the permissions. ... Delegating control implies administrative control (i.e. make ... with Exchange 2000, it no longer implies full access to all mailboxes. ... If you want the domain admin to have full access to all mailboxes, ...
    (microsoft.public.exchange.admin)
  • Re: PASSWORD
    ... But sometimes windows actually spit ... and where do I control it? ... > Administrator account and I am trying to access PC A over network. ... >> If I restrict users from accessing my folders, then they get a warning ...
    (microsoft.public.windowsxp.security_admin)
  • Domain Admin cannot run program
    ... client Windows XP Pro SP1 ... The Domain Admin could not run the program, ... I don't have any really strict domain policies in place, ... I have a copy of the Group Policy Results Query should anyone need it. ...
    (microsoft.public.windowsxp.help_and_support)
  • Local Folder access
    ... client Windows XP Pro SP1 ... The Domain Admin could not run the program, ... I don't have any really strict domain policies in place, ... I have a copy of the Group Policy Results Query should anyone need it. ...
    (microsoft.public.windows.server.networking)
  • Local program access
    ... client Windows XP Pro SP1 ... The Domain Admin could not run the program, ... I don't have any really strict domain policies in place, ... I have a copy of the Group Policy Results Query should anyone need it. ...
    (microsoft.public.windowsxp.security_admin)