Re: How to revoque a delegeted right

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/26/04 

Date: Mon, 26 Jul 2004 17:43:55 GMT

You will have to go to the security properties for that OU in AD Users and Computers
and look for the user/group that was delegated that right and remove them. If you are
in doubt, create a new OU, that you can later remove, and compare the permissions and
it should become apparent what permissions need to be removed. You may also have to
look in the advanced page of security properties. Dscacls /s can also be used to
reset permissions to an AD object to default levels. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;281146

"Muriel" <nyoka@iol.ie> wrote in message
news:459101c4732e$6e7e7e50$a501280a@phx.gbl...
> Let's imagine as an administrator, you have deleguated
> the rights of "reset passwords" to a group for a
> organisational unit. Late, you decide that the user in
> the domain local group is abusing that right and wish to
> revoque it.
> I tried to use the mmc but I can't find the right snap-in
> on reset passwords.
> How do you do it?
> How can you check and change the rights delegated to a
> user (group) by an administrator?
>
> I'd appreciate all suggestions
>
> Thank you

Relevant Pages

  • Re: How to revoque a delegeted right
    ... Thank you very much Steve ... >look in the advanced page of security properties. ... >> Let's imagine as an administrator, ... >> the domain local group is abusing that right and wish ...
    (microsoft.public.win2000.security)
  • Re: Restricting Access to certain files
    ... Administrator ... Security Properties for the above folder: ... User - Doug ... All other Users and Groups are removed from this folder's Security properties page. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Change security with "runas"
    ... >Is there a way to access the security properties of a file/folder without ... >logging on as Administrator? ... Like "runas" a program where I can change the ... Type the Administrator password. ...
    (microsoft.public.windows.server.general)
  • Re: Rights to a drive/folder
    ... How do you add right to a specific folder on a server through active ... these are "Permissions" which help you when you learn ... By using the Security properties of the Directory you set the permission ... for that separate object (to a larger variety but somewhat similar set ...
    (microsoft.public.windows.server.active_directory)
  • Cannot Delete File
    ... Yes, since there is no critical data on the drive, I thought this might be a ... > The system itself has rights that supercede that of an administrator. ... > security properties that forbid an administrator from using it, ...
    (microsoft.public.windowsxp.help_and_support)