lockdown dcpromo

From: Jason (namjason_at_hotmail.com)
Date: 03/08/04


Date: Mon, 8 Mar 2004 00:52:10 -0800

Hi,

May I know whether there is a way to lockdown the dcpromo
to member of Administrators?

Thanks,
Jason



Relevant Pages

  • Re: Administrator cant change security
    ... administrators group on the domain member can configure permissions on any ... computers can not reliably contact a domain controller. ... I'm signing on as Administrator on a second Windows 2003 server that is ...
    (microsoft.public.windows.server.security)
  • Re: Security groups being removed
    ... be the expected behavior because of the AdminSDHolder thread on the DC ... This object is used to control the permissions of user accounts that are ... members of the built-in Administrators or Domain Administrators groups. ... a user account is a member of one of these administrative groups because ...
    (microsoft.public.windows.server.sbs)
  • Re: True difference between Domain Admin grp and Administrators Group
    ... is a member of the domain "administrator" group by default. ... The domain admin group not only has local administrator ... group is automatically added to the local "administrators" group. ... Members of this group have full control of the domain. ...
    (microsoft.public.windows.server.general)
  • RE: Permissions
    ... administrative permissions in each domain (Domainb.local ... Create a local group on the member server in the ... >Symptom 1 often occurs when the domain administrators ...
    (microsoft.public.win2000.security)
  • RE: Security groups being removed
    ... and all of the member objects of these groups: ... This object is used to control the permissions of user accounts that are ... members of the built-in Administrators or Domain Administrators groups. ... AdminSDHolder thread. ...
    (microsoft.public.windows.server.sbs)