Re: Administrator

I would a bit worried if you do not trust your Domain Admins. BTW, there is
no way to solve this without taking SPS out of the domain.

--
Gary A. Bushey
SPS MVP
bushey@xxxxxxxxxxxxxx
"JMark" <anonymous@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:010b01c53a11$cc3a3930$a401280a@xxxxxxxxxx
> Thanks. In our company, domain admin group has to be added
> to the local administrator group for each server. So
> basically these guys are all admins of my SPPS - this is a
> security issue.
>
> How can we solve this?
>
>
>
>>-----Original Message-----
>>No. This is a security feature so that there is always a
> way to manage
>>security just in case someone screws up and deletes all
> admin rights on a
>>site or area.
>>
>>--
>>Gary A. Bushey
>>SPS MVP
>>bushey@xxxxxxxxxxxxxx
>>"JMark" <anonymous@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
> message
>>news:0b1f01c53a08$419c0320$a501280a@xxxxxxxxxx
>>> Hi,
>>>
>>> Members of the administrators group for the local SPP
>>> server computer are allowed to perform administrative
>>> functions for SPPS.
>>>
>>> In our SPP server, 3 users from the domain admin group
> are
>>> the local administrator of this server. Is there any
> ways
>>> that I can remove their "admin" rights from the SPPS
>>> without removing them from the local administrator group
>>> of tha server?
>>>
>>> Please help.
>>
>>
>>.
>>


.

Relevant Pages

  • Re: Administrator
    ... domain admin group has to be added ... to the local administrator group for each server. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Domain Admins Not Fully In Local Administrators
    ... ONLY REQUIRED ON THIS NEW SERVER WITH WINDOWS 2003! ... Windows 2003 domain controllers ... Domain Admin can login into the server "A" ... Domain Admin group is listed in local Administrators group ...
    (microsoft.public.security)
  • Re: Server Security
    ... In my opinion you want accountability for administrators and each administrator ... "The" administrator account should not be used and given a very long ... make sure that if there is sensitive information on that server, ... > name with domain admin rights on each. ...
    (microsoft.public.win2000.security)
  • Re: Exchange 2000 containers (Fields) not showing up in active directory!!
    ... Don't need to log on with a domain admin ID. ... exchange should be done, there is a chapter in the up and coming Windows Server ... Joe Richards Microsoft MVP Windows Server Directory Services ... >>be managing users directly from domain controllers, ...
    (microsoft.public.win2000.active_directory)
  • Re: How can I prevent a TS user from TS or RDP to another server?
    ... And why do they need to be a Domain Admin in order to ... on the one server, then you can use standard methods of the ... to control where that domain user account may be used. ... I just want them to be able to TS or RDP to this box only and if they ...
    (microsoft.public.win2000.security)