Re: How to revoque a delegeted right

anonymous_at_discussions.microsoft.com
Date: 07/29/04


Date: Thu, 29 Jul 2004 11:20:27 -0700

I'll have to test that tomorrow.

Thank you very much Steve

Muriel
>-----Original Message-----
>You will have to go to the security properties for that
OU in AD Users and Computers
>and look for the user/group that was delegated that
right and remove them. If you are
>in doubt, create a new OU, that you can later remove,
and compare the permissions and
>it should become apparent what permissions need to be
removed. You may also have to
>look in the advanced page of security properties.
Dscacls /s can also be used to
>reset permissions to an AD object to default levels. ---
 Steve
>
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;281146
>
>"Muriel" <nyoka@iol.ie> wrote in message
>news:459101c4732e$6e7e7e50$a501280a@phx.gbl...
>> Let's imagine as an administrator, you have deleguated
>> the rights of "reset passwords" to a group for a
>> organisational unit. Late, you decide that the user in
>> the domain local group is abusing that right and wish
to
>> revoque it.
>> I tried to use the mmc but I can't find the right snap-
in
>> on reset passwords.
>> How do you do it?
>> How can you check and change the rights delegated to a
>> user (group) by an administrator?
>>
>> I'd appreciate all suggestions
>>
>> Thank you
>
>
>.
>



Relevant Pages

  • Re: How to revoque a delegeted right
    ... You will have to go to the security properties for that OU in AD Users and Computers ... it should become apparent what permissions need to be removed. ... > Let's imagine as an administrator, ... > the domain local group is abusing that right and wish to ...
    (microsoft.public.win2000.security)
  • Re: guest account
    ... the inability to login as Administrator without booting to Safe ... the inability to join a Windows domain or connect to other non-MS ... network services ... Steve ...
    (microsoft.public.windowsxp.general)
  • Re: Domain Security
    ... --- Steve ... think "administrator" is a particular individual. ... seeing failed logon attempts to the administrator account on computer x ... They happen to look in the event viewer ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Restricting Access to certain files
    ... Administrator ... Security Properties for the above folder: ... User - Doug ... All other Users and Groups are removed from this folder's Security properties page. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator rights
    ... quick way to check is to access the command prompt and run the command " ... Below is similar to what you should see other than Steve is my ... account but as you can see only Steve and administrator are in the local ... "add/remove Windows componets. ...
    (microsoft.public.windowsxp.security_admin)