Re: Local admin rights on a domain controller?
From: Steven L Umbach (n9rou_at_comcast.net)
Date: 08/31/03
- Next message: wutsitallabout: "Built In Admin account vs Created one"
- Previous message: William H. Hiatt III: "Local admin rights on a domain controller?"
- In reply to: William H. Hiatt III: "Local admin rights on a domain controller?"
- Next in thread: Jack Seredyniecki: "Re: Local admin rights on a domain controller?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 31 Aug 2003 00:19:37 GMT
Hi William. What you ask can not be done. There are no local administrators on domain
controllers as you already probably know. You can do things to initially restrict
them, but ultimately they will be able to do whatever they want. Keep in mind that
since a W2K domain controller contains a writeable copy of the Active Directory for
the whole domain , it must be physically secured. You really need to consider a
separate W2K server for file and print sharing. The folks at the
win2000.active_directory newsgroup will be able to help you out also. Chapter nine
of the Deployment Guide and the Branch Office Guide are worth reading. --- Steve
http://www.microsoft.com/windows2000/techinfo/reskit/dpg/default.asp
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/branchoffice/default.asp
http://tinyurl.com/lqj5 --- Same as above, shorter link.
"William H. Hiatt III" <willyoupleaseiam@not.spam.hiatt.me.com.net> wrote in message
news:e04TeI1bDHA.880@TK2MSFTNGP09.phx.gbl...
> We are in the process of designing and piloting Active Directory. We have
> over 100+ remote offices, each one will receive a server that will be there
> local domain controller as well as file and print server.
>
> Here is my problem. I need to give certain groups local admin rights on
> their respective server in each office. However, I do NOT want them to have
> domain admin rights.
>
> Unfortunately, I don't know a single way of doing this, and was hoping you
> might be able to help. Any thoughts?
>
>
> Thank You
>
>
> William
>
>
- Next message: wutsitallabout: "Built In Admin account vs Created one"
- Previous message: William H. Hiatt III: "Local admin rights on a domain controller?"
- In reply to: William H. Hiatt III: "Local admin rights on a domain controller?"
- Next in thread: Jack Seredyniecki: "Re: Local admin rights on a domain controller?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
