Re: Account question

From: Victor Matei (rvf_at_bebe.moc)
Date: 05/08/03 

Date: Thu, 8 May 2003 10:06:08 -0400

How would you use the "Self" to prevent any accounts from adding themselves
to a security group ?

"Joe Richards [MVP]" <humorexpress@hotmail.com> wrote in message
news:O9Wl5WPFDHA.432@TK2MSFTNGP12.phx.gbl...
> Not sure if I have ever seen it documented.
>
> Self is literally self. If you give modify rights for the description
attribute to all objects in a container and it has
> a user named User1 and a computer named Computer1. User1 could modify
description on User1 and Computer1 could modify
> description on Computer1 but they couldn't modify each other.
>
> --
> Joe Richards
> www.joeware.net
>
> --
>
> "Victor Matei" <rvf@bebe.moc> wrote in message
news:uZtfmgMFDHA.1548@TK2MSFTNGP12.phx.gbl...
> > Can anyone point to a more exhaustive description and explanation of the
> > "SELF" account in AD ?
> > And an example how this is supposed to be used properly ?
> > Thanks in advance.
> >
> >
>
>

Relevant Pages

  • Re: Changed services... now im in trouble!
    ... > Locate the Service in the list and modify it. ... >> Unable to log into other accounts ... >> access to the internet but the email program error message ... Can you change services option in the registry? ...
    (microsoft.public.windowsxp.general)
  • Re: Changed services... now im in trouble!
    ... Locate the Service in the list and modify it. ... > Security Accounts Manager were altered... ...
    (microsoft.public.windowsxp.general)
  • Re: Name reference invalid
    ... Thanks for your reply Ace. ... The script shouldn't have been anything overcomplex, I was using AD Modify ... PS As an update - It appears the only accounts affected were those I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricting User Logon with Group Policy
    ... > You need to modify the security privilege called "Log on locally". ... you need to modify it allowing only Administrators ... But you might need to keep some groups or accounts depending on your ... I am confused about which group policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricting User Logon with Group Policy
    ... You need to modify the security privilege called "Log on locally". ... By default, a lot of accounts are granted this privilege, e.g. ... I am confused about which group policy ...
    (microsoft.public.windows.server.active_directory)