Re: Best Default security group in AD for Tech. Support

Tech-Archive recommends: Fix windows errors by optimizing your registry

You will need to touch every machine manually or write a script to touch them or use a startup script from a OU level policy that applies to the client computers.


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


MaST MaX wrote:
Hi Andrei

Thank You for replaying

We can do this. But how come it's possible to configure all the
clients? There is approximate 300 clients in domain.

Regards,
MaST MaX

Andrei Ungureanu [MVP] wrote:
Create a separate group for Tech Support (with no rights on AD objects) and
add this to the local Administrators group on the client computers.

--
Regards,
Andrei Ungureanu
www.eventid.net
Test our new EventReader!
http://www.altairtech.ca/eventreader/default2.asp?ref=au


"MaST MaX" <mustafajambu@xxxxxxxxx> wrote in message
news:1168848424.672056.309170@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi guys

I have windows 2003 Domain in my office. I installed
Microsoft SharePoint portal server in one of member windows 2003
server. Our all technical support users are member of administrator
group so by default they get administrator rights in SharePoint portal
sites. I want to remove administrator rights from SharePoint Portal or
from AD but they should get full permissions on client's computer?

1. How can I restrict them?

2. Which is the best Default security group in AD for Tech. Support For
full permission in Client's Computers and no administrative rights?

3. Where I have to move Tech Support users?

Regards,
MaST Max


.

Relevant Pages