Re: Win2k User Management

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 07/13/03


Date: Sun, 13 Jul 2003 00:51:51 -0400


Being a domain admin imparts no special powers over workstations. If the workstation owner has removed domain admins
from the local administrators group, the domain admins have no direct rights over the workstation, they could if they
wanted however gain control over the workstation via a group policy in the active directory and then get access.

-- 
Joe Richards
www.joeware.net
--
"Abhishek" <abhi_narulkar@burntmail.com> wrote in message news:OgzvrFVRDHA.2636@TK2MSFTNGP10.phx.gbl...
> Hi,
>      In a network with a domain and workstations under that domain, can a
> domain administrator access any remote machine without being a part of the
> administrators group on the remote machine(local). If yes, then how come the
> domain administrators credentials be verified on the remote machine if the
> domain admin is not part of the local administrators group.
> Thanks,
> Abhishek.
>
>


Relevant Pages

  • Re: AD to desktop Permissions problem
    ... account to the local administrators group on her workstation without making ... her a Domain Admin. ... The former proffers admin rights to a single ... workstation, the latter to your entire domain. ...
    (microsoft.public.windows.server.general)
  • Re: How to grant security access to Help Desk?
    ... Add it tot he Local Administrators group. ... I finally got approved to get some help and hired a help desk engineer. ... don't want to give him "domain Admin" security access. ... the workstation. ...
    (microsoft.public.windows.server.active_directory)
  • Re: users must be local admin but this means domain admin can be locked out
    ... and audit all workstation group membership from the domain instead of having ... > If you delete the domain admin from the machine, domain admin can login, ... Can modify the users and groups *that they have created.* ... operating system services or modify operating system files ...
    (microsoft.public.win2000.security)
  • Re: Cant install any software from a netwwork drive.
    ... domain admin has full control in the share permissions and the file ... I have a feeling this is something microsoft have done as a security measure ... the trouble of preventing us from launching executables from a mapped drive, ... Can you log on as a local workstation administrator on a workstation (not ...
    (microsoft.public.windows.server.general)
  • Re: AD to desktop Permissions problem
    ... account to the local administrators group on her workstation without making ... her a Domain Admin. ... The former proffers admin rights to a single ... workstation, the latter to your entire domain. ...
    (microsoft.public.windows.server.general)