Re: Administrators , power user

No, there aren't sublevels of administrators. If you amke someone an administrator, they have root level access to do anything they want.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


beachboy wrote:
I want to create a user and grant a administors group permission, is
possible to restrict that user can't change password for all user, include
herself~

Thanks.


.

Relevant Pages

  • Re: Email Password Expire Notifications
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... If you don't want to write a little .NET app for this and would rather write a script, it will probably be easier for you to use a tool like Joe Richard's oldcmp tool than to try to execute the queries directly in script, as formating the queries is a little painful in VBS. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Extract Organization Structure from AD
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Defending Security Infrastructures http://blog.joeware.net/2006/07/11/445/ ...
    (microsoft.public.windows.server.active_directory)
  • Re: Query disabled users and delete their memberof associations
    ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Query disabled users and delete their memberof associations
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Dim objDSE, objConnection, objCommand, objRecordset, i ...
    (microsoft.public.windows.server.active_directory)
  • Re: PWD NOT REQ
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... computers as well on computers if I remember you and Ulf correctly)... ...
    (microsoft.public.windows.server.active_directory)