Re: Best Default security group in AD for Tech. Support

Create a separate group for Tech Support (with no rights on AD objects) and
add this to the local Administrators group on the client computers.

--
Regards,
Andrei Ungureanu
www.eventid.net
Test our new EventReader!
http://www.altairtech.ca/eventreader/default2.asp?ref=au


"MaST MaX" <mustafajambu@xxxxxxxxx> wrote in message
news:1168848424.672056.309170@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi guys

I have windows 2003 Domain in my office. I installed
Microsoft SharePoint portal server in one of member windows 2003
server. Our all technical support users are member of administrator
group so by default they get administrator rights in SharePoint portal
sites. I want to remove administrator rights from SharePoint Portal or
from AD but they should get full permissions on client's computer?

1. How can I restrict them?

2. Which is the best Default security group in AD for Tech. Support For
full permission in Client's Computers and no administrative rights?

3. Where I have to move Tech Support users?

Regards,
MaST Max



.

Relevant Pages

  • Re: Windows Client and Server Security
    ... I am working as a System Administrator in ... > these Computers. ... > He thinks that we should give all the Users, Administrator rights. ... If you have badly-written software that requires local admin rights, ...
    (microsoft.public.win2000.security)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)
  • Re: Is complete home security possible?
    ... > If you are a gamer, some computer games will only run in administrator ... I have a clean disk image made from Norton Ghost, ... security issues to deal with to do it monthly, ... I have been using computers since 76, never had a virus on any of my ...
    (comp.security.firewalls)
  • RE: The Authentication service is unknown.
    ... The error message "The Authentication service is unknown" ... configured the source domain to trust the target domain. ... * Domain Administrator rights in the target domain. ... Administrator rights on each computer that you migrate. ...
    (microsoft.public.windows.server.migration)
  • Re: Explorer doesnt start anymore
    ... I can boot in safe mode and log on. ... Administrator I created a new user account and ... I was working under a user with limited rights (Windows XP ... explorer (I can see that in task manager), but the task bar doesn't show ...
    (microsoft.public.windowsxp.help_and_support)