Re: Account Operators Group


"Richard Mueller [MVP]" <rlmueller-nospam@xxxxxxxxxxxxxxxxxxxx> wrote in
message news:uaxO7kSwIHA.6096@xxxxxxxxxxxxxxxxxxxxxxx
Does this article explain what you see:

http://support.microsoft.com/kb/245174

Per the article Account Operators cannot manage users that are members of
the following restricted groups:

Account Operators
Administrators
Backup Operators
Print Operators
Server Operators
Domain Admins

If you have users that are not members of any of these groups, even due to
group nesting, and lack the ACE, then you have a problem. However, any
program to fix it must check each user for membership in any of these
groups, or any other groups that are members of these groups.

I was going to mention this.

And as to the delegation of authority, it can be performed for
this group or others using either Permission tabs or the
delegation of control wizard (right click on domain or OU.)


.

Relevant Pages

  • Re: restrict reset of Admin Password
    ... Server operators and account operators can not reset or otherwise modify ... could also look into AD delegation at the domain or OU level that will allow ...
    (microsoft.public.win2000.security)
  • Re: adminDSholder being over zealous!
    ... I have experienced the same problems, where users in members of groups ... without the account ACLs reverting to match AdminSDHolder. ... account operators can manage their own accounts or the ... >>A supported fix is now available from Microsoft, ...
    (microsoft.public.win2000.security)
  • Re: Account Operators Group
    ... Per the article Account Operators cannot manage users that are members of ... Backup Operators ... If you have users that are not members of any of these groups, ...
    (microsoft.public.win2000.active_directory)
  • Account operators
    ... Designated users are members of account operators but ...
    (microsoft.public.win2000.active_directory)
  • Re: About a dozen U.S. lawmakers in Israel
    ... Close to a dozen members of both houses of Congress were in Israel ... traveling on his own; a four-person delegation ... senior member of the House Intelligence Committee, ...
    (alt.politics.bush)