Re: Limiting rights to a second administrator account

From: Dan DiNicolo (dan@2000trainers.com)
Date: 04/12/03


From: "Dan DiNicolo" <dan@2000trainers.com>
Date: Fri, 11 Apr 2003 20:20:51 -0500


Use group policy settings, or the local system policy, to apply individual
rights as necessary to a newly created group, and then add users to that
group as required.

Dan
------------------------------------------------------------------
Dan DiNicolo
dan@2000trainers.com

Find all of our latest free technical articles at
http://www.2000trainers.com and ask your technical questions at
http://forums.2000trainers.com

"JOSE G. URBINA" <JGURBINA@STCC.CC.TX.US> wrote in message
news:069701c3007d$aa0f0950$a001280a@phx.gbl...
> Hello,
> Recently a friend and I, that work at a city college were
> requested by our IT Dept. to implement an administrator
> password for them. This poses a dilema for use since they
> want to have full access with one same password on all the
> computers. The thing is that if anyone gets ahold of that
> password they will have administrative previliges to all
> computers. This is when we stated that we have teachers
> and students who need administrative previliges to the
> computer, their answer was that we create a second account
> on the computers with a diffrent password. But since both
> have administrator rights we worry that students will
> reset the password on the first account, which is our main
> concern. In short is there a way to customize a new admin
> user that cannot modify another admin, all I have recieved
> is default windows account information, how can I
> customize the second admin account.
> Your reply would be greatly appreciated.



Relevant Pages

  • Re: DP does not update source files. Help!
    ... Granting a machine account rights is fairly simple. ... top of the Select Users, Computers, or Groups dialog box... ... sharing rights to the central file server share. ...
    (microsoft.public.sms.swdist)
  • Re: Copying Files using startup script
    ... you could always create a dedicated account for this and ... have to put the credntials in clear text in the script. ... > copying down to the computers durring the startup script. ... > out what rights I need to assing on the share. ...
    (microsoft.public.win2000.group_policy)
  • Re: RIS domain join problem
    ... by default every useraccount has the right to join 10 computers to the domain, administrative accounts or accounts with delegated rights on the specific OU are not limited. ... It sounds like you were using a useraccount for the installation via RIS which has not administrative rights and exceeded his limits now. ... and make sure you give the used account the right to create and modify computeraccounts in that domain. ...
    (microsoft.public.windows.server.active_directory)
  • Problems connecting to computers
    ... I have a network of 10 computers. ... rights ... I created a dummy admin account that I thought would help, ... I put in the login and password, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Alerting - Malicious software removal tool
    ... >needed to install an application that she could not install from ... >"Administrator" account. ... You failed to analyze the root cause and correct it ... use their computers to have fun. ...
    (microsoft.public.security.virus)