Re: Where to find default user account security settings?



The Schema and the extended-rights container are the best places to get the info. The defaults change through the various OSes.

If you want to know what they all mean, the best place to look would probably be the Active Directory Delegation White Paper.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


SecAdmin wrote:
Assume defaults to all your questions.  Are the defaults documented anywhere?

Jack

"Joe Richards [MVP]" wrote:


Do you mean the default permissions assigned to new user objects as they are created? If so it is a combination of the defaultSD from the schema definition combined with the effective inherited permissions in the container or OU that the user is created in and whether or not the userid is considered an "admin id" by the OS and thereby impacted by the adminsdholder process.

   joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


SecAdmin wrote:

Does anyone know where the default Advanced Security Settings for user accounts settings are documented?

.



Relevant Pages

  • Re: Restoring Active Directory
    ... You always want to be careful with companies wanting to extend your schema, ... you will be able to defunct the old bad attribs. ... >>What exactly is the vendor saying? ... >>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)
  • Re: Different Order in GAL
    ... There must be a way to modify the schema, that the displayname will ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: running 2003 schema on 200 dcs
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Author of O'Reilly Active Directory Third Edition ... Jason Meyer wrote: ... I have read that if I update the schema the changes will fix my CA issue. ...
    (microsoft.public.win2000.active_directory)
  • Re: Restoring Active Directory
    ... and Schema and the like that'll benefit me in the future so all is not lost. ... > should allow you to apply your Exchange schema mods (test in a test lab forest ... > What exactly is the vendor saying? ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)