Re: How to revoque a delegeted right

anonymous_at_discussions.microsoft.com
Date: 07/29/04


Date: Thu, 29 Jul 2004 11:20:27 -0700

I'll have to test that tomorrow.

Thank you very much Steve

Muriel
>-----Original Message-----
>You will have to go to the security properties for that
OU in AD Users and Computers
>and look for the user/group that was delegated that
right and remove them. If you are
>in doubt, create a new OU, that you can later remove,
and compare the permissions and
>it should become apparent what permissions need to be
removed. You may also have to
>look in the advanced page of security properties.
Dscacls /s can also be used to
>reset permissions to an AD object to default levels. ---
 Steve
>
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;281146
>
>"Muriel" <nyoka@iol.ie> wrote in message
>news:459101c4732e$6e7e7e50$a501280a@phx.gbl...
>> Let's imagine as an administrator, you have deleguated
>> the rights of "reset passwords" to a group for a
>> organisational unit. Late, you decide that the user in
>> the domain local group is abusing that right and wish
to
>> revoque it.
>> I tried to use the mmc but I can't find the right snap-
in
>> on reset passwords.
>> How do you do it?
>> How can you check and change the rights delegated to a
>> user (group) by an administrator?
>>
>> I'd appreciate all suggestions
>>
>> Thank you
>
>
>.
>



Relevant Pages

  • Re: How to revoque a delegeted right
    ... You will have to go to the security properties for that OU in AD Users and Computers ... it should become apparent what permissions need to be removed. ... > Let's imagine as an administrator, ... > the domain local group is abusing that right and wish to ...
    (microsoft.public.win2000.security)
  • Re: user profile question
    ... I was using the built-in Administrator when it became corrupted. ... to create the one named Steve to overcome the start-up error messages. ... Scrolling down I have the User profile that I created named Steve. ... of the account, don't abbreviate the spelling. ...
    (microsoft.public.windowsxp.general)
  • Re: guest account
    ... the inability to login as Administrator without booting to Safe ... the inability to join a Windows domain or connect to other non-MS ... network services ... Steve ...
    (microsoft.public.windowsxp.general)
  • Re: user profile question
    ... Reboot and logon as "Administrator" You cannot create another user with the same name, just try to log back on to the old Administrator account. ... Thanks, Steve T. ... "John John - MVP" wrote in message ...
    (microsoft.public.windowsxp.general)
  • Re: Domain Security
    ... --- Steve ... think "administrator" is a particular individual. ... seeing failed logon attempts to the administrator account on computer x ... They happen to look in the event viewer ...
    (microsoft.public.windowsxp.security_admin)