Re: Admin Vs. Admin + Passphrase

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 11/22/05


Date: Mon, 21 Nov 2005 23:12:49 -0700

Ususally one can try to limit the ability of administrators, or of
a specific account that is an admin, but the bottom line is that if
they want to they will be able to undo the limitations.
In other words, the limiting of password change capability you
ask is not realistically possible.

One just starts using passphrases. There is today no way to
set the system to only accept (require) as a password something
that one might call a passphrase, but one can surely use such.

"WhoC@nItbN0W" <WhoCnItbN0W@discussions.microsoft.com> wrote in message
news:142B37E4-F392-420B-923D-9A549C66B077@microsoft.com...
> Hi:
> 1. I have two questions here.
>
> 2. Was wondering if there would be a way of not letting one admin change
> the password of another but be able to change the password of the other.
> eg
> There are three admins A, B and C. A can change password of B but not C. B
> can change of C but not A and so on.
> (On the Domain or on the local machine- any one would do)
>
> 3. How does one enable passphrases btw? I have 2K003 with XP pro running.
>
> TIA



Relevant Pages

  • Re: User Account hidden from Administrator
    ... My reply is at the bottom of your sent message: ... > the Administrator - ie when I log in as Admin I cannot see her account ... If you log onto an admin account, press start, run, type "control ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Security Breach in AD! Help!
    ... > about 5 minutes the user was removed from the built in admin group. ... > changed the default domain policy, the default domain controller policy, ... >> auditing of account logon for success and failure and account management ... >> success and failure in Domain Controller Security Policy. ...
    (microsoft.public.win2000.security)
  • Re: Wscript within VBA
    ... One box is running VBA code,. ... One box is a domain controller, or has an account trusted to manipulate AD ... >> It posts a form to an ASP page, ... >> Since what you want to do sounds like it will require admin privileges, ...
    (microsoft.public.vb.database)
  • RE: Question regarding admin passwords on sbs.
    ... I'd also ask you to reconsider disabling the Administrator account, ... describe create another account with Domain Admin privileges for your regular ... Even Microsoft has no solution to *Crack* the ...
    (microsoft.public.windows.server.sbs)