Re: Active Directory User Groups

From: mwcanton (mwcanton_at_discussions.microsoft.com)
Date: 07/13/05 

Date: Wed, 13 Jul 2005 10:51:13 -0700

Steve,

Thanks very much .........

"Steven L Umbach" wrote:

> In Active Directory Users and Computers examine the membership of these
> groups - administrators, domain admins, and enterprise admins. Remove
> users/groups that should not be members including the Faculty Group. You can
> also use Group Policy Restricted Groups to enforce and maintain membership
> of domain and local groups on domain computers. --- Steve
>
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/611.asp
> --- Restricted Groups.
>
> "mwcanton" <mwcanton@discussions.microsoft.com> wrote in message
> news:EB77AA02-77A7-4A5B-835F-9B9C7CCFDD58@microsoft.com...
> > We have a Faculy Group that contains all our teacher user accounts. It was
> > brought to my attension that they all have Domain Admin rights. Is there a
> > tool that I can use to strip that entire group of Domain Admin rights.
> > Windows Server 2003.
> > Thanks
>
>
>

Relevant Pages

  • Re: Domain Users rights on local machine
    ... The domain Users are just members of the Users group. ... groups -> groups -> Power Users and add to the list of members the Domain ... Power Users Access, if yes how so? ... is a Domain Admin given ...
    (microsoft.public.windowsxp.setup_deployment)
  • Domain Users for FP access
    ... I have Global Security Group and a Domain Admin user that ... I would like for members of the Global Security ... on that server. ... local Administrators group can get access to the sites ...
    (microsoft.public.frontpage.extensions.windowsnt)
  • Re: Domain Admin password changes
    ... Yes, by not making other members of domain admin or enterprise admins, and ... that is member of both enterprise admins and domain admins for several ... I recommend you to limit the workstations where domain ... My boss wants to set the default domain admin ...
    (microsoft.public.windows.server.active_directory)
  • Re: Finding the domain
    ... they are members of the domain. ... I'm even logged in with the domain Admin and ... I'll try the command you listed and reply back. ... Prev by Date: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Service accounts best practices
    ... guidance on granting admin accounts. ... >> The only people who should have domain admin rights are the exact people ... >> doing domain admin work and it should be a very small group. ... >>>>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.security)