Re: W2K Pro Local Admins
From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam@hydro.com)
Date: 04/16/03
- Next message: James Ash: "Re: The local policy of the system does not permit you to log on interactively"
- Previous message: Torgeir Bakken (MVP): "Re: retriving password"
- In reply to: tr6boy: "W2K Pro Local Admins"
- Next in thread: Joe Richards [MVP]: "Re: W2K Pro Local Admins"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 16 Apr 2003 00:11:26 +0200 From: "Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com>
tr6boy wrote:
> "Managers" in my company are questioning the value of
> having Domain Admins group in the Local Administrators
> group of every Windows 2000 Pro machine (there are about
> 5000 client PCs).
>
> It's not enough for me to say it's like that by design,
> or that I may need that access to fix a problem. They are
> proposing that a special group be created of 2 or 3
> people that are local admins on every machine.
Hi
If you can't trust the people that are placed in the Domain Admins group, then
you have a greater problem (I assume that all users aren't put into that
group). Anyway, you should not have much more than 3 people in the Domain
Admins group anyway (especially if this is an AD domain).
-- torgeir Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/scriptcenter
- Next message: James Ash: "Re: The local policy of the system does not permit you to log on interactively"
- Previous message: Torgeir Bakken (MVP): "Re: retriving password"
- In reply to: tr6boy: "W2K Pro Local Admins"
- Next in thread: Joe Richards [MVP]: "Re: W2K Pro Local Admins"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
