Re: Confused

From: Sergio Fonseca [MVP] (fonsecase_at_iol.pt)
Date: 07/25/04


Date: Sun, 25 Jul 2004 17:26:41 +0100

Hi,

By default, the members of the Domain Admins group are "administrators" of
the member servers of domain.
Who do you have in the domain "domain admins" and in the member servers
local administrators group ?

Qualquer sugestão deve ser testada antes de aplicada - www.gupade.org

<anonymous@discussions.microsoft.com> wrote in message
news:054c01c471db$e1affc40$3501280a@phx.gbl...
> I do select the root domain, and I can login, I just do
> not have "god" rights the the servers in the child
> domains. I check the domain admins group on a dc in child
> domain 1 and it only shows local (meaning child domain
> ids) users in the domain admins grp, just administrator.
> I attempt to go to the root domain and then select a
> global group there and it says their are no selections
> available.
>
> Thanks
> >-----Original Message-----
> >Ensure you have selected the root domain when you logon
> as administrator.
> >
> >--
> >Regards
> >Christoffer Andersson
> >Microsoft MVP - Directory Services
> >
> >No email replies please - reply in the newsgroup
> >------------------------------------------------
> >http://www.chrisse.se - Active Directory Tips
> >
> >"Chris" <chrislisi2002@yahoo.com> skrev i meddelandet
> >news:359001c471c8$07cefca0$a601280a@phx.gbl...
> >> Ok here is the deal, I am setting up a parent (forest
> >> root) and 3 child domains. I am now having security
> >> issues when I log in on a child domain server with an ID
> >> from the forest root that is an enterprise admin. All
> of
> >> my organizations user ids will eventually reside in the
> >> forest root and the the 3 domains are resources.
> >> Enterprise admins should have god rights thoughout the
> >> forest or am I missing something.
> >>
> >> Thanks
> >> Chris
> >
> >
> >.
> >



Relevant Pages

  • Re: Privilege elevation not sticking
    ... If you do not have administrator control on that domain computer, ... Net localgroup administrators would show that information. ... > In AD Users & Computers on the DC I make a User a member of Domain Admins. ...
    (microsoft.public.win2000.security)
  • Restrict Desktop Administrators Issue
    ... I run a small Win2k native mode network with 28 servers, ... Since these guys are Domain Admins my policy restriction ... them out of the Domain Admins group or something else? ... My desktop guys need to be administrators on all the ...
    (microsoft.public.win2000.security)
  • Restrict Desktop Administrators Issue
    ... I run a small Win2k native mode network with 28 servers, ... Since these guys are Domain Admins my policy restriction ... them out of the Domain Admins group or something else? ... My desktop guys need to be administrators on all the ...
    (microsoft.public.win2000.active_directory)
  • Restrict Desktop Administrators Issue
    ... I run a small Win2k native mode network with 28 servers, ... Since these guys are Domain Admins my policy restriction ... them out of the Domain Admins group or something else? ... My desktop guys need to be administrators on all the ...
    (microsoft.public.win2000.group_policy)
  • Re: Rights needed to install servicepack/hotfix on DC
    ... I'll explain what I meant...The builtin administrators group is, I believe, ... domain admins group is added to all domain members local administrator ... > doesn't add them to the local administrators accounts of member servers ... >> I need to grant my regional admins the rights to install service ...
    (microsoft.public.win2000.active_directory)