Re: Restrict User account creation

Hello Net,

It's like you said, he is master of desaster. Even if you find a way to restrict him as domain admin, he also has the right to undo your restrictions. So make him normal user and delegate control.

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

I know that Domain Admins are the Gods of the domain but I must ask
this
question..
Has anyone found a way to restrict a Domain Admin member from creating
new
user accounts?
If not then I will demote this person to Domain User and delegate the
neccessary rights.
Thank you



.

Relevant Pages

  • Re: Domain Admins restriction
    ... > There is no such thing as a restricted domain administrator. ... >> few user files I want to restrict him from. ... >> I tried Domain Admin to the folders and then adding ... >> his name to these folder and restricting access, ...
    (microsoft.public.win2000.active_directory)
  • RE: Restrict the Domain Admin
    ... Give one set of rights to internal audit and another to ... Have a change process to get access to the domain admin account on the ... Subject: Restrict the Domain Admin ... Aren't these proceedural controls and not technical? ...
    (Security-Basics)
  • Re: Restrict Domain admins for Remote Desktop
    ... restrict users in same groups then either set up another security group, ... Administrators from using Remote Desktop onto my computer. ... want to restrict a domain admin and an administrator without ... restricting myself as I am also a domain admin and administrator. ...
    (microsoft.public.windowsxp.general)
  • Re: Client Access Rights
    ... This would only be a problem if the users in question had domain admin ... rights. ... > Note that while this will work in general, ultimately you can not restrict ... > separate domains or better yet separate forests. ...
    (microsoft.public.win2000.networking)
  • Re: Client Access Rights
    ... This would only be a problem if the users in question had domain admin ... rights. ... > Note that while this will work in general, ultimately you can not restrict ... > separate domains or better yet separate forests. ...
    (microsoft.public.windows.server.networking)
Quantcast