Re: Delegation of groups admin. - restricted to a subset of object

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



That is a confusing sentence, but if I got any kind of meaning out of it my response is this... The permission on a user has no bearing on what groups you can add that user to.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Dragos CAMARA wrote:
it's partial true; only i have rights to modify members of the group i can add the user to that group, not if i have full rights to the user.
.



Relevant Pages

  • Re: Distribution Groups changing to Security Groups
    ... have permission, there are ways to grant yourself those permissions to do so. ... >>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Enabling Password Complexity
    ... Jack answered your questions well in the other response. ... I just wanted to add that in Longhorn AD, you will have the option of setting up different password policies for different users. ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: read and write permission does not delete word ~ files
    ... Isn't the only differnece between Read&Execute with Write and the Modify the ... > In the advanced tab you can specify delete permission instead of giving ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.security)
  • Re: Only view permission
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Karan wrote: ... If I am giving read permission to that folder then users are copying it. ...
    (microsoft.public.win2000.active_directory)
  • Re: Audit exchange permission
    ... What I want is to check which group or users have permission to all the ... exchange objects. ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.advanced_server)