Shared permissions vs. security

From: Carl Gross (CarlGross_at_discussions.microsoft.com)
Date: 05/19/05

  • Next message: Bob Weiner: "Re: LDAP/S" 
    Date: Thu, 19 May 2005 09:55:31 -0700

    I have been trying to make our network more secure by setting each
    workstation hardrive shared between Domain Admins with Full Control rights.

    What is the difference between setting this permission and selecting the
    Security tab to have the same permissions except adding the SYSTEM and user
    at that workstation?

    We have W2K SP4 workstations on a SBS 2003 server.

  • Next message: Bob Weiner: "Re: LDAP/S"

    Relevant Pages

    • Re: Unable to prevent OU deletion by Domain Admins?
      ... > that DENY ACLs trump any allow ACLs ... Deny permissions take precedence over allow ... the list of permission entries in the DACL. ... I understand that domain admins have the delete and delete subtree rights at the domain level. ...
      (microsoft.public.win2000.active_directory)
    • Re: Unable to prevent OU deletion by Domain Admins?
      ... >> that DENY ACLs trump any allow ACLs ... Deny permissions take precedence over allow ... > the list of permission entries in the DACL. ... > You could modify the default domain admins permissions so that they no ...
      (microsoft.public.win2000.active_directory)
    • Re: Restricting Domain Admins
      ... > Change the security on the adminSDHolder container so that domain admins ... > Modify Permissions ... >>> Removed Modify permission ... >>> Removed modify owner permission ...
      (microsoft.public.windows.server.security)
    • Re: Restricting Domain Admins
      ... > protect the domain admins group to the level that I require. ... >>> Modify Permissions ... >>> modifying the domain admins group membership, ... >>>>> Removed Modify permission ...
      (microsoft.public.windows.server.security)
    • Re: Restricting Domain Admins
      ... > Change the security on the adminSDHolder container so that domain admins ... > Modify Permissions ... >>> Removed Modify permission ... >>> Removed modify owner permission ...
      (microsoft.public.windows.server.security)