Re: AD Super Administrator

From: Brian Desmond [MVP] (desmondb_at_payton.cps.k12.il.us)
Date: 06/10/03

  • Next message: Joe Kinsella: "Disabling file & print sharing" 
    Date: Mon, 9 Jun 2003 16:52:31 -0600

    Since the original poster is an admin, he can just take ownership
    back...Keith's suggestion to enable auditing is the best solution if you
    want to retain your privledgs. Your boss can go check the sec logs if he is
    worried that you're poking around where you don't belong. 

    -- 
--Brian Desmond
Windows Server MVP
desmondb@payton.cps.k12.il.us
http://www.wpcp.org
Beta #469090
"Keith W. McCammon" <km@km.com> wrote in message
news:e#TOu6rLDHA.2124@TK2MSFTNGP12.phx.gbl...
> > Right now, I have removed myself from a true admin and just added my
> account
> > to a memeber of every group that I need except administrators. However,
> > mundain tasks like updating drivers on the DC are not allowed except by
> > admins.
>
> All your boss needs to do is take ownership of the folder in question and
> remove you from the ACL.  You can stay in the domain admins group.  If
he's
> paranoid about it, show him how to enable auditing for that folder.
>
>
  • Next message: Joe Kinsella: "Disabling file & print sharing"

    Relevant Pages

    • Re: Restrict take ownership rights
      ... If you could take away take ownership rights for only that folder (you ... I want to ensure that local administrators cannot come ... however they need local admin rights for some other reasons e.g. ...
      (microsoft.public.security)
    • Re: stupid mistake
      ... If you take ownership of the folder, which you should be able to do as the ... you will have the rights to redo the permissions. ... > admin or as an IT Admin. ...
      (microsoft.public.win2000.security)
    • Re: Help - corrupt Profile & unable to open files
      ... Last week my login profile got corrupted. ... Get the same message even as Admin. ... See if taking ownership of the folder and files helps. ... In Help and Support search on ownership or see this KB article. ...
      (microsoft.public.windowsxp.general)
    • Re: Co-Administrator
      ... so an Admin can take ownership of any given folder ... I would like to grant admin rights with a young colleague so that he ...
      (microsoft.public.windows.server.sbs)
    • Re: access users folders
      ... If the admin does not currently have any permissions to access the folder he will ... have to take ownership first. ... in the current operating system. ...
      (microsoft.public.win2000.security)
    • Quantcast