Re: OU'Admin

Hello Cesar,

As said before please post the groups where this account is member of. What do you mean with LC5 ?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Meinolf Weber wrote:
Hi
This is my scenario
One AD for a whole Company, and as many as OUs needed for each
department
I have delegated the Control of each of the OUs to a person belongin
to that
OU, with all set of rights, like and administrator but the OU he
belongs to
my question is if there is any chance to gain access to the AD
administrator
rights, I mean with all means, including LC5 and that kind of stuff
TIA

Cesar

Hello Cesar,

If they are only delegated the rights on the OU, without making any
kind of admin or adding them to the administrators group, think not.
Maybe describe what you have delegated and what group members they
are.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
Hello all,
I have a domain with several OU's each OU has it's own
administrator.
Is there any way this OU'Admin get access to administer the whole
AD?
i'm worry about it could happens,
TIA
Cesar Guerra



.

Relevant Pages

  • Re: OUAdmin
    ... What do you mean with LC5? ... This posting is provided "AS IS" with no warranties, and confers no rights. ... OU, with all set of rights, like and administrator but the OU he ...
    (microsoft.public.windows.server.security)
  • Re: Detecting the Administrator Password
    ... If you google a bit there exist tools to reset the administrator ... Meinolf Weber ... Disclaimer: This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.win2000.general)
  • Re: to use address book , pc out of domain
    ... You can not assign permissions to non-domain users this way i think, ... Disclaimer: This posting is provided "AS IS" with no warranties, ... no rights. ...
    (microsoft.public.windows.server.active_directory)
  • Re: can not log in
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... password is the password of the local Administrator account. ... Administrator account to the Users group (i.e., ...
    (microsoft.public.win2000.general)
  • Re: Bulk remove orphaned SID
    ... Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.windows.server.active_directory)