I have a handful of domain admins that I want to take away the ability to
add computers to the domain while letting some keep this privilege. How can
this be easily done?
Re: can my domain administrators see what i have typed ... But my statement still holds -- you should trust your domain admins,... > Joe Richards Microsoft MVP Windows Server Directory Services... >> They already know my domain accounts password....>>>Joe Richards Microsoft MVP Windows Server Directory Services... (microsoft.public.windows.server.active_directory)
Re: Domain admin ...Domain Admins is a global group, it can only contain users from the domain the group exists in. ...Joe Richards Microsoft MVP Windows Server Directory Services... figure out how to do the grouping to add our user accounts from domain ... (microsoft.public.windows.server.active_directory)
Re: AD Inherit Permissions wont stick ...Joe Richards Microsoft MVP Windows Server Directory Services...domain admins.... I have delegated permissions at the OU levels for all different ...Enterprise admin accounts.... (microsoft.public.exchange2000.active.directory.integration)
Re: Add user from another forest as a domain admin ...Domain Admins is a global group, it can only have members from the domain the group exists in. ...Joe Richards Microsoft MVP Windows Server Directory Services... I am unable to add a user from the target domain as a domain ... (microsoft.public.windows.server.active_directory)
Re: Limit who can add domain admins? ... any questions should be posted in the NewsGroup... This posting is provided "AS IS" with no warranties, ...Joe Richards Microsoft MVP Windows Server Directory Services... I only want Admin1 to be able to add other domain admins.... (microsoft.public.win2000.active_directory)
