Re: NTFS Permissions on local groups after dcpromo?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 09/14/04 

Date: Tue, 14 Sep 2004 18:35:06 -0400

The domain built-in group administrators is the same as the built-in group
administrators on member servers. It is just that in a domain, the DCs all share
the same built-in groups. These groups may appear to be domain local and local
groups, but they are not.

The SID is actually identical for both groups - S-1-5-32-544

   joe 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Franz Schenk wrote:
> In a server migration project, we restored directories from a DC to a 
> memberserver. All NTFS permissions for the Built in domain local group 
> "Administrators" are now granted to the memberserver local group 
> "administrators".
> 
> Is it correct that when a member server is promoted to a DC (dcpromo), NTFS 
> Permissions granted to the server local Administrators group will be 
> migrated as well and the same NTFS Permissions will be granted to the 
> Built-In domain local group "Administrators"? (because local users and 
> gruoups will not be available anymore)
> 
> Thank you all in advance for all answers
> Franz 
> 
>

Relevant Pages

  • [Full-disclosure] n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated admi
    ... unauthenticated administrative access to CTI CCA Server ... 2010/02/16 initial information to Alcatel-Lucent from n.runs AG ... administrators. ... In addition there is no real authentication taking place. ...
    (Full-Disclosure)
  • n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to C
    ... unauthenticated administrative access to CTI CCA Server ... 2010/02/16 initial information to Alcatel-Lucent from n.runs AG ... administrators. ... In addition there is no real authentication taking place. ...
    (Bugtraq)
  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows 2003 - User Logins vs Software
    ... > We have recently installed a Windows 2003 domain server. ... admin, open "Active Directory Users and Computers", locate the workstation ... "Administrators" group under "Local users and Groups". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Rights in TS
    ... registry key that I needed to modify was an HKLM key. ... different subnet for VPN clients is intriguing. ... Administrators have complete and unrestricted access ... Regarding the TS server and AD link - thanks for your reply about ...
    (microsoft.public.windows.terminal_services)