Re: Default domain permissions

From: Jorge_de_Almeida_Pinto (UseLinkToEmail_at_WindowsForumz.com)
Date: 07/27/05 

Date: 27 Jul 2005 13:36:15 -0400

"" wrote:
> Hi all - posted this issue in win2000.active_directory a few
> days ago,
> wonder someone could help me?
>
> The OS is windows2000, single domain in native mode.
>
> When I log onto my machine (which has the admin tools
> installed) as a normal
> user, I can modify/create/delete domain user accounts, and
> create new GPO's.
>
> Things I have tried:
>
> Checking everyone group and domain user group permissions on
> the domain and
> each OU. Would appear that those groups have reset password
> and some write
> permissions. They are not members of domain
> admins/admins/enterprise
> admins.
>
> I have searched high and low for what the default domain user
> permissions
> should be but cannot locate a document with them on. Could
> someone post
> them here please?
>
> Any help much appreciated.

to see what the default explicit security is of each object in AD when
created do the following:
BE VERY CAREFULLWITH WHAT YOU DO!
* open a command prompt
* run schmmgmt.msc
* Click on the classes node
* Right click on the class of the object you want to check the default
permissions for
* Click on the Default Security TAB (may be called something else
depending on OS)
* Et voila the default permissions for the class an object belongs to 

-- 
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Security-Default-domain-permissions-ftopict401050.html
Visit Topic URL to contact author (reg. req'd).  Report abuse: http://www.windowsforumz.com/eform.php?p=1327197

Relevant Pages

  • Re: SHAREPOINT AND RWW ISSUES
    ... In WSS 2.0, when you create a Domain User account, the server adds it to SharePoint with 'Web Designer' rights. ... If you want to see or change these permissions for this group, go to 'Site Settings' / 'Go to Site Administration' / 'Manage Site Groups', click on 'Web Designer and then select 'Edit Site Group Permissions' ...
    (microsoft.public.windows.server.sbs)
  • Re: User Profiles
    ... the new hive to allow the domain user. ... In addition to the NTFS file permissions on the profile directories, ... are permissions contained in the registry hive stored in ntuser.dat (which ... New User Accounts May Not Be Permitted to Use User Profiles ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding PC to Domain. What really happens
    ... your domain user may have rights that your workgroup user ... * PLEASE post all messages and replies in the newsgroups ... > Registry, files, permissions, local GPO's. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Default domain permissions
    ... BTW - the user account in question is a member of domain users ONLY. ... >> Checking everyone group and domain user group permissions on ... >> I have searched high and low for what the default domain user ... > Visit Topic URL to contact author (reg. ...
    (microsoft.public.win2000.security)
  • Re: slow iis 6.0 performance
    ... Where could I get a list of permissions that I need to set? ... done this is setup the domain user account on the DC. ... permissions required on the local web server? ... this user must have some priviliges such as for schannel. ...
    (microsoft.public.inetserver.iis)