restrict reset of Admin Password

From: Altria (urbantec92_at_msn.com)
Date: 03/11/04 

Date: Thu, 11 Mar 2004 10:11:12 -0500

Hello All,
Is there a way that I can have my staff not be able to reset the Admin
password and leave them with group membership of server operators and
account operators. I give these priviledges to them so that they are able to
join computers and users onto the domain during rollout. Or is it better to
create a temporary account and delete it afterwards with the appropriate
permissions. In most cases what priviledges are given to support staff? I
would like to limit as much as I can but I would like them to get on with
thier daily duties?
My Main concern is the Admin password reset though.
TIA,
Altria

Relevant Pages

  • Re: Funny - any comments?
    ... wanted to approach management about this issue. ... > is better than a slapped together system where IT staff simply must know ... >> The actual issue is the Exchange email server is in one Windows ... If absolutely necessary, the admin could ...
    (microsoft.public.security)
  • Re: AD design question
    ... slightly more than 100x more staff and 100x more students. ... not quite certain what you mean by "secure the administrator account". ... shouldn't even be using the builtin admin account after you setup the ... enterprise admin group without physical access to the servers? ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD design question
    ... more than 100x more staff and 100x more students. ... I would just go down the path of a single domain/single forest model. ... not quite certain what you mean by "secure the administrator account". ... shouldn't even be using the builtin admin account after you setup the ...
    (microsoft.public.windows.server.active_directory)
  • Re: local users and groups
    ... > he has now made himself an admin again and removed dom admins from the admin group ... It is very easy to reset the local Administrator password ... To avoid this in the future, set the boot order in the BIOS to boot ...
    (microsoft.public.win2000.general)
  • Re: Very confused, Admin was resest somehow, need help asap.
    ... my aunt and uncle were the admin. ... Well, when I wiped it clean, I set myself as admin, and everything was going fine. ... Well, somehow, their user accounts popped back up, reset itself to admin, and reset my user to limited. ...
    (microsoft.public.windowsxp.help_and_support)