I have a user that was a domain admin. I have found several folders sitting
out there on various servers that have been restricted to his user account
only, I had to take ownership to be able to delete the folders.
Is there a program that can scan my servers for these weird security
permissions looking for other things that he may have done?
Re: Insane issue trying to launch an app... help please. ... trying to cross reference servers that work with servers that don't to ... have the appropriate permissions to access the item." ... I'm logged in as a domain admin, and I can perform other tasks that ... I am able to execute/launch the exact same exe from the command prompt. ... (microsoft.public.windows.server.general)
Re: Admin accounts for Run As purposes only ... the addition of new high-privilege accounts to run when a domain admin logs... don't have enough servers to achieve a separation. ... At the end of the day, you have to trust your administrators, but it's easy ... > I know we can delegate alot of tasks now such as user account... (microsoft.public.windows.server.active_directory)
Re: Admin accounts for Run As purposes only ...Administrators group of each server that needs to be managed. ... is this just as strong as a Domain Admin or is it more limited / ... > don't have enough servers to achieve a separation. ... >> I know we can delegate alot of tasks now such as user account... (microsoft.public.windows.server.active_directory)
Re: Remove domain admins from local admins group on specific serve ... Are we talking about DCs or member servers?... > I have delegated full control of an OU under the main domain to a group. ... This group is also part of the local admins group on all ... >> Actually you don't restrict the domain admin you restrict who you add to ... (microsoft.public.win2000.active_directory)
Re: NT4 to Windows 2003 AD Migration Question ... You want something that can map the accounts from the source to the ... > I have around 1500 workstations, a couple hundred servers.... > seems most tools want domain admin on the AD side as well. ... We are tasked with building the OU from scratch, so SID history... (microsoft.public.windows.server.active_directory)
