Re: Cannot modify some groups/users in AD

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Megan Kielman (megan.kielman_at_(removethis)weyerhaeuser.com)
Date: 05/19/04 

Date: Wed, 19 May 2004 08:59:30 -0700

When I open certain groups/users all fields are grayed out so I cannot
modify them in any way. In one case, there is a global group that is grayed
out, and I looked at the "member of" tab but it isn't a member of a
"protected group".

As a side note, what happens if an object is a member of a "protected
group"?

"Chriss3" <noSpamHere@chrisse.se> wrote in message
news:OpuJgRbPEHA.2256@TK2MSFTNGP10.phx.gbl...
> Can you explain the particular behavior you have and what you are trying
> to
> do? Some groups are 'Protected Groups' , Domain Admins , Schema Admins,
> Enterpise Admins , Cert Publishers, Administrators, Account Operators,
> Server Operators , Print Operators and Backup Operators.
>
> --
> Regards
> Christoffer Andersson
>
> No email replies please - reply in the newsgroup
> ------------------------------------------------
> http://www.chrisse.se - Active Directory Tips
>
> "Megan Kielman" <megan.kielman@(removethis)weyerhaeuser.com> skrev i
> meddelandet news:eh4dKJbPEHA.4036@TK2MSFTNGP12.phx.gbl...
>> Hi everyone,
>>
>> I have noticed that I cannot modify some groups and users in ADUC. I have
>> been told it is because these users/groups have more privileges then I do
>> but I can't seem to figure out how this is determined and if is even
>> accurate information. If this is true, what is this called? Is it a
> built-in
>> feature of AD? If this isn't true, is there a permission that has been
>> configured that I am not aware of? It doesn't matter which OU these
>> groups
>> or users are in.
>>
>> Thanks!
>>
>>
>
>

Relevant Pages

  • Re: Return by value -- primitive type vs class type
    ... Yes, it technically invokes an operator function, but the semantics still ... reflect a direct modification of an rvalue that's being returned from the ... even though it is going "through" a member function ... can you successfully invoke a mutating function, yet not "modify the ...
    (comp.lang.cpp)
  • Re: Time Based Distribution List?
    ... There is a risk to the specific list you are modifying, ... changetype: modify ... in the member section where you have ... For the 8am scheduled task: ...
    (microsoft.public.exchange.admin)
  • RE: Collisions between converter(?) and TSO?
    ... Yes, I am modifying the member ... I've got 20 or so jobs that exercise ... Collisions between converter(?) and TSO? ... Your OP said "Modify a JCL INCLUDE used by the job." ...
    (bit.listserv.ibm-main)
  • Re: nTSecurityDescriptor overwritten by **Deleted Server #1
    ... if you check the inheritance checkbox and the check is gone after let's say an hour or so, then the user is member of a protected group directly or is member of a group that is a member of a protected group. ... A user account security permission on the AD has explicitly set to "not ...
    (microsoft.public.windows.server.active_directory)
  • Re: Time Based Distribution List?
    ... "Eric Bockelman" wrote: ... changetype: modify ... replace: member ...
    (microsoft.public.exchange.admin)